Auth(update)

src/main/java/com/mmc/oms/common/ResultEnum.java

@@ -400,7 +400,8 @@ public enum ResultEnum implements BaseErrorInfoInterface {
     THE_TOKEN_IS_INVALID("2014", "token失效"),
     REFUND_FAILED("2015", "退款失败，请联系客服"),
     NO_PERMISSION_TEMPORARILY("2016", "当前账号没有权限，只有后台账号拥有权限"),
-    THERE_IS_NO_SUCH_ORDER("2017", "没有当前订单,请输入正确的订单编号");
+    THERE_IS_NO_SUCH_ORDER("2017", "没有当前订单,请输入正确的订单编号"),
+    THE_TOKEN_CANNOT_BE_NULL("2018", "token不能为null");
 
     /**
      * 错误码

src/main/java/com/mmc/oms/filter/AuthSignatureFilter.java

@@ -66,6 +66,17 @@ public class AuthSignatureFilter implements AuthFilter {
     @Override
     public boolean before(HttpServletRequest request, HttpServletResponse response) {
         String url = request.getRequestURI();
+        String token1 = request.getHeader("token");
+        if (null == token1) {
+            response(response, ResultBody.error(ResultEnum.THE_TOKEN_CANNOT_BE_NULL));
+            return false;
+        } else if (token1 != null) {
+            String json = stringRedisTemplate.opsForValue().get(token1);
+            if (null == json) {
+                response(response, ResultBody.error(ResultEnum.THE_TOKEN_IS_INVALID));
+                return false;
+            }
+        }
         // 忽略以下url请求,白名单路径以及swagger路径
         if (!ArrayUtils.contains(IGNORE_URLS, url)
                 && !ArrayUtils.contains(USE_KEY, url) && !url.startsWith("/oms/webjars") && !url.startsWith(SWAGGER_URL_PREFIX)) {