提交 256ef2b3 作者: 张小凤

Auth(update)

上级 cbda2b6c
......@@ -38,10 +38,10 @@ public class AuthSignatureFilter implements AuthFilter {
/**
* 无需登录白名单
*/
private static final String[] IGNORE_URLS = {"/oms/swagger/swagger-resources", "/oms/swagger/v2/api-docs", "/oms/swagger/doc.html", "/oms/doc.html"};
private static final String[] IGNORE_URLS = {"/oms/swagger-resources", "/oms/v2/api-docs", "/oms/doc.html"};
/*无需加密狗无需登录白名单*/
private static final String[] USE_KEY = {"/crm/account/loginByUsbKey"};
private static final String[] USE_KEY = {"/oms/account/loginByUsbKey"};
/**
* 请求方式预请求方式值
......@@ -49,7 +49,7 @@ public class AuthSignatureFilter implements AuthFilter {
private static final String REQUEST_METHOD_OPTIONS_VALUE = "OPTIONS";
public static final String SWAGGER_URL_PREFIX = "/oms";
public static final String SWAGGER_URL_PREFIX = "/oms/doc.html";
@Override
public void init(FilterConfig filterConfig) {
......@@ -66,20 +66,12 @@ public class AuthSignatureFilter implements AuthFilter {
@Override
public boolean before(HttpServletRequest request, HttpServletResponse response) {
String url = request.getRequestURI();
String token1 = request.getHeader("token");
if (null == token1) {
response(response, ResultBody.error(ResultEnum.THE_TOKEN_CANNOT_BE_NULL));
return false;
} else if (token1 != null) {
String json = stringRedisTemplate.opsForValue().get(token1);
if (null == json) {
response(response, ResultBody.error(ResultEnum.THE_TOKEN_IS_INVALID));
return false;
}
}
// 忽略以下url请求,白名单路径以及swagger路径
if (!ArrayUtils.contains(IGNORE_URLS, url)
&& !ArrayUtils.contains(USE_KEY, url) && !url.startsWith("/oms/webjars") && !url.startsWith(SWAGGER_URL_PREFIX)) {
if (REQUEST_METHOD_OPTIONS_VALUE.equals(request.getMethod())) {
response.setStatus(HttpServletResponse.SC_OK);
return false;
......
Markdown 格式
0%
您添加了 0 到此讨论。请谨慎行事。
请先完成此评论的编辑!
注册 或者 后发表评论