mirror of
https://github.com/Hello-hao/Tbed.git
synced 2026-09-20 03:18:28 +00:00
Merge remote-tracking branch 'origin/master'
This commit is contained in:
@@ -81,7 +81,6 @@ public class SubjectFilter extends BasicHttpAuthenticationFilter {
|
||||
}
|
||||
}
|
||||
|
||||
// String token = httpServletRequest.getHeader("Authorization");
|
||||
JSONObject jsonObject = JWTUtil.checkToken(token);
|
||||
if(!jsonObject.getBoolean("check")){
|
||||
if(!serviceName.contains("admin") || serviceName.contains("admin/client")){
|
||||
@@ -151,7 +150,6 @@ public class SubjectFilter extends BasicHttpAuthenticationFilter {
|
||||
} catch (Exception e) {
|
||||
System.out.println("返回token验证失败403请求,报异常了");
|
||||
}
|
||||
|
||||
return false;
|
||||
}
|
||||
|
||||
|
||||
@@ -32,8 +32,4 @@ public class XssFilter implements Filter {
|
||||
filterChain.doFilter(new XssHttpServletRequestWrapper(request),servletResponse);
|
||||
}
|
||||
|
||||
@Override
|
||||
public void destroy() {
|
||||
|
||||
}
|
||||
}
|
||||
@@ -42,7 +42,6 @@ public class ShiroConfig {
|
||||
bean.setUnauthorizedUrl("/authError");
|
||||
bean.setFilterChainDefinitionMap(filterMap);
|
||||
return bean;
|
||||
|
||||
}
|
||||
|
||||
@Bean
|
||||
|
||||
@@ -56,7 +56,7 @@ public class UserRealm extends AuthorizingRealm {
|
||||
if(u==null){
|
||||
return null;
|
||||
}
|
||||
//密码认证(防止泄露,不需要我们做)
|
||||
//密码认证
|
||||
return new SimpleAuthenticationInfo(u,u.getPassword(),"");
|
||||
}
|
||||
}
|
||||
|
||||
@@ -36,7 +36,7 @@ public class JWTUtil {
|
||||
}
|
||||
|
||||
public static JSONObject checkToken(String token){
|
||||
JWTVerifier jwtVerifier = JWT.require(Algorithm.HMAC256(SECRET)).build();//验证对象
|
||||
JWTVerifier jwtVerifier = JWT.require(Algorithm.HMAC256(SECRET)).build();
|
||||
JSONObject jsonObject = new JSONObject();
|
||||
if(null==token){
|
||||
jsonObject.put("check",false);
|
||||
|
||||
Reference in New Issue
Block a user