提交 51a0a539 作者: 张小凤

Auth(update)

上级 b0710900
...@@ -38,11 +38,11 @@ public class AuthSignatureFilter implements AuthFilter { ...@@ -38,11 +38,11 @@ public class AuthSignatureFilter implements AuthFilter {
/** /**
* 无需登录白名单 * 无需登录白名单
*/ */
private static final String[] IGNORE_URLS = {"/payment/swagger/swagger-resources" private static final String[] IGNORE_URLS = {"/payment/swagger-resources"
, "/payment/swagger/v2/api-docs", "/payment/swagger/doc.html", "/payment/repocash/walletUsers", "/payment/doc.html"}; , "/payment/v2/api-docs", "/payment/repocash/walletUsers", "/payment/doc.html"};
/*无需加密狗无需登录白名单*/ /*无需加密狗无需登录白名单*/
private static final String[] USE_KEY = {"/crm/account/loginByUsbKey"}; private static final String[] USE_KEY = {"/oms/account/loginByUsbKey"};
/** /**
* 请求方式预请求方式值 * 请求方式预请求方式值
...@@ -50,7 +50,7 @@ public class AuthSignatureFilter implements AuthFilter { ...@@ -50,7 +50,7 @@ public class AuthSignatureFilter implements AuthFilter {
private static final String REQUEST_METHOD_OPTIONS_VALUE = "OPTIONS"; private static final String REQUEST_METHOD_OPTIONS_VALUE = "OPTIONS";
public static final String SWAGGER_URL_PREFIX = "/payment"; public static final String SWAGGER_URL_PREFIX = "/payment/doc.html";
@Override @Override
public void init(FilterConfig filterConfig) { public void init(FilterConfig filterConfig) {
...@@ -67,20 +67,10 @@ public class AuthSignatureFilter implements AuthFilter { ...@@ -67,20 +67,10 @@ public class AuthSignatureFilter implements AuthFilter {
@Override @Override
public boolean before(HttpServletRequest request, HttpServletResponse response) { public boolean before(HttpServletRequest request, HttpServletResponse response) {
String url = request.getRequestURI(); String url = request.getRequestURI();
String token1 = request.getHeader("token");
if (null == token1) {
response(response, ResultBody.error(ResultEnum.THE_TOKEN_CANNOT_BE_NULL));
return false;
} else if (token1 != null) {
String json = stringRedisTemplate.opsForValue().get(token1);
if (null == json) {
response(response, ResultBody.error(ResultEnum.THE_TOKEN_IS_INVALID));
return false;
}
}
// 忽略以下url请求,白名单路径以及swagger路径 // 忽略以下url请求,白名单路径以及swagger路径
if (!ArrayUtils.contains(IGNORE_URLS, url) if (!ArrayUtils.contains(IGNORE_URLS, url)
&& !ArrayUtils.contains(USE_KEY, url) && !url.startsWith("/payment/webjars") && !url.startsWith(SWAGGER_URL_PREFIX)) { && !ArrayUtils.contains(USE_KEY, url) && !url.startsWith("/payment/webjars") && !url.startsWith(SWAGGER_URL_PREFIX)) {
if (REQUEST_METHOD_OPTIONS_VALUE.equals(request.getMethod())) { if (REQUEST_METHOD_OPTIONS_VALUE.equals(request.getMethod())) {
response.setStatus(HttpServletResponse.SC_OK); response.setStatus(HttpServletResponse.SC_OK);
return false; return false;
......
Markdown 格式
0%
您添加了 0 到此讨论。请谨慎行事。
请先完成此评论的编辑!
注册 或者 后发表评论