提交 256ef2b3 作者: 张小凤

Auth(update)

上级 cbda2b6c
...@@ -38,10 +38,10 @@ public class AuthSignatureFilter implements AuthFilter { ...@@ -38,10 +38,10 @@ public class AuthSignatureFilter implements AuthFilter {
/** /**
* 无需登录白名单 * 无需登录白名单
*/ */
private static final String[] IGNORE_URLS = {"/oms/swagger/swagger-resources", "/oms/swagger/v2/api-docs", "/oms/swagger/doc.html", "/oms/doc.html"}; private static final String[] IGNORE_URLS = {"/oms/swagger-resources", "/oms/v2/api-docs", "/oms/doc.html"};
/*无需加密狗无需登录白名单*/ /*无需加密狗无需登录白名单*/
private static final String[] USE_KEY = {"/crm/account/loginByUsbKey"}; private static final String[] USE_KEY = {"/oms/account/loginByUsbKey"};
/** /**
* 请求方式预请求方式值 * 请求方式预请求方式值
...@@ -49,7 +49,7 @@ public class AuthSignatureFilter implements AuthFilter { ...@@ -49,7 +49,7 @@ public class AuthSignatureFilter implements AuthFilter {
private static final String REQUEST_METHOD_OPTIONS_VALUE = "OPTIONS"; private static final String REQUEST_METHOD_OPTIONS_VALUE = "OPTIONS";
public static final String SWAGGER_URL_PREFIX = "/oms"; public static final String SWAGGER_URL_PREFIX = "/oms/doc.html";
@Override @Override
public void init(FilterConfig filterConfig) { public void init(FilterConfig filterConfig) {
...@@ -66,20 +66,12 @@ public class AuthSignatureFilter implements AuthFilter { ...@@ -66,20 +66,12 @@ public class AuthSignatureFilter implements AuthFilter {
@Override @Override
public boolean before(HttpServletRequest request, HttpServletResponse response) { public boolean before(HttpServletRequest request, HttpServletResponse response) {
String url = request.getRequestURI(); String url = request.getRequestURI();
String token1 = request.getHeader("token");
if (null == token1) {
response(response, ResultBody.error(ResultEnum.THE_TOKEN_CANNOT_BE_NULL));
return false;
} else if (token1 != null) {
String json = stringRedisTemplate.opsForValue().get(token1);
if (null == json) {
response(response, ResultBody.error(ResultEnum.THE_TOKEN_IS_INVALID));
return false;
}
}
// 忽略以下url请求,白名单路径以及swagger路径 // 忽略以下url请求,白名单路径以及swagger路径
if (!ArrayUtils.contains(IGNORE_URLS, url) if (!ArrayUtils.contains(IGNORE_URLS, url)
&& !ArrayUtils.contains(USE_KEY, url) && !url.startsWith("/oms/webjars") && !url.startsWith(SWAGGER_URL_PREFIX)) { && !ArrayUtils.contains(USE_KEY, url) && !url.startsWith("/oms/webjars") && !url.startsWith(SWAGGER_URL_PREFIX)) {
if (REQUEST_METHOD_OPTIONS_VALUE.equals(request.getMethod())) { if (REQUEST_METHOD_OPTIONS_VALUE.equals(request.getMethod())) {
response.setStatus(HttpServletResponse.SC_OK); response.setStatus(HttpServletResponse.SC_OK);
return false; return false;
......
Markdown 格式
0%
您添加了 0 到此讨论。请谨慎行事。
请先完成此评论的编辑!
注册 或者 后发表评论