新增认证对象简化权限验证

RuoYi

2021-10-20 d0a5c25b5d11e55eb6fea05cc7165458f8340e1b

 ruoyi-gateway/src/main/java/com/ruoyi/gateway/filter/XssFilter.java

@@ -2,6 +2,7 @@


import java.nio.charset.StandardCharsets;

import org.springframework.beans.factory.annotation.Autowired;

import org.springframework.boot.autoconfigure.condition.ConditionalOnProperty;

import org.springframework.cloud.gateway.filter.GatewayFilterChain;

import org.springframework.cloud.gateway.filter.GlobalFilter;

import org.springframework.core.Ordered;

@@ -10,6 +11,7 @@
import org.springframework.core.io.buffer.NettyDataBufferFactory;

import org.springframework.http.HttpHeaders;

import org.springframework.http.HttpMethod;

import org.springframework.http.MediaType;

import org.springframework.http.server.reactive.ServerHttpRequest;

import org.springframework.http.server.reactive.ServerHttpRequestDecorator;

import org.springframework.stereotype.Component;

@@ -27,6 +29,7 @@
 * @author ruoyi

 */

@Component

@ConditionalOnProperty(value = "security.xss.enabled", havingValue = "true")

public class XssFilter implements GlobalFilter, Ordered

{

    // 跨站脚本的 xss 配置，nacos自行添加

@@ -40,6 +43,11 @@
        // GET DELETE 不过滤

        HttpMethod method = request.getMethod();

        if (method == null || method.matches("GET") || method.matches("DELETE"))

        {

            return chain.filter(exchange);

        }

        // 非json类型，不过滤

        if (!isJsonRequest(exchange))

        {

            return chain.filter(exchange);

        }

@@ -93,6 +101,17 @@
        return serverHttpRequestDecorator;

    }



    /**

     * 是否是Json请求

     * 
     * @param request

     */

    public boolean isJsonRequest(ServerWebExchange exchange)

    {

        String header = exchange.getRequest().getHeaders().getFirst(HttpHeaders.CONTENT_TYPE);

        return StringUtils.startsWithIgnoreCase(header, MediaType.APPLICATION_JSON_VALUE);

    }



    @Override

    public int getOrder()

    {