From 57723b9ca18f987710bd1499e10f895381ce13c7 Mon Sep 17 00:00:00 2001
From: RuoYi <yzz_ivy@163.com>
Date: Mon, 08 Jun 2020 09:37:58 +0800
Subject: [PATCH] 网关验证码过滤器添加放行校验
---
ruoyi-gateway/src/main/java/com/ruoyi/gateway/filter/ValidateCodeFilter.java | 29 ++++++++++++++++-------------
1 files changed, 16 insertions(+), 13 deletions(-)
diff --git a/ruoyi-gateway/src/main/java/com/ruoyi/gateway/filter/ValidateCodeFilter.java b/ruoyi-gateway/src/main/java/com/ruoyi/gateway/filter/ValidateCodeFilter.java
index 767d9d3..cc4d673 100644
--- a/ruoyi-gateway/src/main/java/com/ruoyi/gateway/filter/ValidateCodeFilter.java
+++ b/ruoyi-gateway/src/main/java/com/ruoyi/gateway/filter/ValidateCodeFilter.java
@@ -1,10 +1,9 @@
package com.ruoyi.gateway.filter;
-import com.ruoyi.common.core.utils.web.WebUtils;
-import com.ruoyi.gateway.config.properties.IgnoreClientProperties;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.cloud.gateway.filter.GatewayFilter;
import org.springframework.cloud.gateway.filter.factory.AbstractGatewayFilterFactory;
+import org.springframework.http.HttpHeaders;
import org.springframework.http.server.reactive.ServerHttpRequest;
import org.springframework.http.server.reactive.ServerHttpResponse;
import org.springframework.stereotype.Component;
@@ -27,8 +26,11 @@
@Autowired
private ValidateCodeService validateCodeService;
- @Autowired
- private IgnoreClientProperties ignoreClient;
+ private static final String BASIC_ = "Basic ";
+
+ private static final String CODE = "code";
+
+ private static final String UUID = "uuid";
@Override
public GatewayFilter apply(Object config)
@@ -41,17 +43,18 @@
{
return chain.filter(exchange);
}
+
+ // 消息头存在内容，且不存在验证码参数，不处理
+ String header = request.getHeaders().getFirst(HttpHeaders.AUTHORIZATION);
+ if (StringUtils.isNotEmpty(header) && StringUtils.startsWith(header, BASIC_)
+ && !request.getQueryParams().containsKey(CODE) && !request.getQueryParams().containsKey(UUID))
+ {
+ return chain.filter(exchange);
+ }
try
{
- // swagger的oauth2.0验证码放行操作
- String[] clientInfos = WebUtils.getClientId(request);
- if (ignoreClient.getClients().contains(clientInfos[0]))
- {
- return chain.filter(exchange);
- }
-
- validateCodeService.checkCapcha(request.getQueryParams().getFirst("code"),
- request.getQueryParams().getFirst("uuid"));
+ validateCodeService.checkCapcha(request.getQueryParams().getFirst(CODE),
+ request.getQueryParams().getFirst(UUID));
}
catch (Exception e)
{
--
Gitblit v1.9.3