fix 修复 sa-token.check-same-token 开关对网关鉴权无效问题

This commit is contained in:
疯狂的狮子li
2023-05-11 10:23:37 +08:00
parent 74d247ace8
commit fd012e423f
2 changed files with 11 additions and 1 deletions

View File

@@ -1,5 +1,6 @@
package org.dromara.common.security.config;
import cn.dev33.satoken.SaManager;
import cn.dev33.satoken.filter.SaServletFilter;
import cn.dev33.satoken.interceptor.SaInterceptor;
import cn.dev33.satoken.same.SaSameUtil;
@@ -35,7 +36,11 @@ public class SecurityConfiguration implements WebMvcConfigurer {
return new SaServletFilter()
.addInclude("/**")
.addExclude("/actuator/**")
.setAuth(obj -> SaSameUtil.checkCurrentRequestToken())
.setAuth(obj -> {
if (SaManager.getConfig().getCheckSameToken()) {
SaSameUtil.checkCurrentRequestToken();
}
})
.setError(e -> SaResult.error("认证失败,无法访问系统资源").setCode(HttpStatus.UNAUTHORIZED));
}