dromara/RuoYi-Cloud-Plus
1
0
Fork 0
mirror of https://gitee.com/dromara/RuoYi-Cloud-Plus.git synced 2025-09-07 12:59:01 +00:00
Code Issues Packages Projects Releases Wiki Activity

update 优化 兼容 clientid 通过 param 传输

Browse Source
This commit is contained in:
疯狂的狮子Li
2023-07-31 09:57:48 +08:00
parent 1917eb7a06
commit d1b672c42e
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
ruoyi-gateway/src/main/java/org/dromara/gateway/filter/AuthFilter.java
View File

@@ -7,7 +7,6 @@ import cn.dev33.satoken.router.SaRouter;
import cn.dev33.satoken.stp.StpUtil; import cn.dev33.satoken.stp.StpUtil;
import cn.dev33.satoken.util.SaResult; import cn.dev33.satoken.util.SaResult;
import org.dromara.common.core.constant.HttpStatus; import org.dromara.common.core.constant.HttpStatus;
import org.dromara.common.core.utils.ServletUtils;
import org.dromara.common.core.utils.StringUtils; import org.dromara.common.core.utils.StringUtils;
import org.dromara.common.satoken.utils.LoginHelper; import org.dromara.common.satoken.utils.LoginHelper;
import org.dromara.gateway.config.properties.IgnoreWhiteProperties; import org.dromara.gateway.config.properties.IgnoreWhiteProperties;
@@ -41,11 +40,12 @@ public class AuthFilter {
// 检查是否登录 是否有token // 检查是否登录 是否有token
StpUtil.checkLogin(); StpUtil.checkLogin();
// 检查 header 里的 clientId 与 token 里的是否一致 // 检查 header 与 param 里的 clientid 与 token 里的是否一致
ServerHttpRequest request = SaReactorSyncHolder.getContext().getRequest(); ServerHttpRequest request = SaReactorSyncHolder.getContext().getRequest();
String headerCid = request.getHeaders().getFirst(LoginHelper.CLIENT_KEY); String headerCid = request.getHeaders().getFirst(LoginHelper.CLIENT_KEY);
String paramCid = request.getQueryParams().getFirst(LoginHelper.CLIENT_KEY);
String clientId = StpUtil.getExtra(LoginHelper.CLIENT_KEY).toString(); String clientId = StpUtil.getExtra(LoginHelper.CLIENT_KEY).toString();
if (!StringUtils.equals(headerCid, clientId)) { if (!StringUtils.equalsAny(clientId, headerCid, paramCid)) {
// token 无效 // token 无效
throw NotLoginException.newInstance( throw NotLoginException.newInstance(
StpUtil.getLoginType(), StpUtil.getLoginType(),