lsm/sa-token
1
0
Fork 0
mirror of https://gitee.com/dromara/sa-token.git synced 2025-06-28 13:34:18 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

v1.40.0 update .

Browse Source
This commit is contained in:
click33 2025-01-31 23:28:02 +08:00
parent 8cbb09d6b7
commit 1fe9a644c7
3 changed files with 9 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
sa-token-core/src/main/java/cn/dev33/satoken/strategy/SaFirewallStrategy.java
View File

@ -42,17 +42,17 @@ public final class SaFirewallStrategy {
/** /**
* 请求 path 黑名单 * 请求 path 黑名单
*/ */
public String[] BLACK_PATHS = {}; public String[] blackPaths = {};
/** /**
* 请求 path 白名单 * 请求 path 白名单
*/ */
public String[] WHITE_PATHS = {}; public String[] whitePaths = {};
/** /**
* 请求 path 不允许出现的字符 * 请求 path 不允许出现的字符
*/ */
public String[] INVALID_CHARACTER = { public String[] invalidCharacter = {
"//", // // "//", // //
"\\", // \ "\\", // \
"%2e", "%2E", // . "%2e", "%2E", // .
@ -67,14 +67,14 @@ public final class SaFirewallStrategy {
*/ */
public SaCheckRequestPathFunction checkRequestPath = (requestPath, extArg1, extArg2) -> { public SaCheckRequestPathFunction checkRequestPath = (requestPath, extArg1, extArg2) -> {
// 1、如果在白名单里，则直接放行 // 1、如果在白名单里，则直接放行
for (String item : WHITE_PATHS) { for (String item : whitePaths) {
if (requestPath.equals(item)) { if (requestPath.equals(item)) {
return; return;
} }
} }
// 2、如果在黑名单里，则抛出异常 // 2、如果在黑名单里，则抛出异常
for (String item : BLACK_PATHS) { for (String item : blackPaths) {
if (requestPath.equals(item)) { if (requestPath.equals(item)) {
throw new RequestPathInvalidException("非法请求：" + requestPath, requestPath); throw new RequestPathInvalidException("非法请求：" + requestPath, requestPath);
} }
@ -87,7 +87,7 @@ public final class SaFirewallStrategy {
throw new RequestPathInvalidException("非法请求：null", null); throw new RequestPathInvalidException("非法请求：null", null);
} }
// 不允许包含非法字符 // 不允许包含非法字符
for (String item : INVALID_CHARACTER) { for (String item : invalidCharacter) {
if (requestPath.contains(item)) { if (requestPath.contains(item)) {
throw new RequestPathInvalidException("非法请求：" + requestPath, requestPath); throw new RequestPathInvalidException("非法请求：" + requestPath, requestPath);
} }

2
sa-token-demo/sa-token-demo-oauth2/sa-token-demo-oauth2-server/src/main/java/com/pj/SaOAuth2ServerApplication.java
View File

@ -1,7 +1,6 @@
package com.pj; package com.pj;
import cn.dev33.satoken.oauth2.SaOAuth2Manager; import cn.dev33.satoken.oauth2.SaOAuth2Manager;
import cn.dev33.satoken.oauth2.template.SaOAuth2Util;
import org.springframework.boot.SpringApplication; import org.springframework.boot.SpringApplication;
import org.springframework.boot.autoconfigure.SpringBootApplication; import org.springframework.boot.autoconfigure.SpringBootApplication;
@ -16,7 +15,6 @@ public class SaOAuth2ServerApplication {
SpringApplication.run(SaOAuth2ServerApplication.class, args); SpringApplication.run(SaOAuth2ServerApplication.class, args);
System.out.println("\nSa-Token-OAuth2 Server端启动成功，配置如下："); System.out.println("\nSa-Token-OAuth2 Server端启动成功，配置如下：");
System.out.println(SaOAuth2Manager.getServerConfig()); System.out.println(SaOAuth2Manager.getServerConfig());
SaOAuth2Util.getCode("xxxxxxxxx");
} }
} }

7
sa-token-demo/sa-token-demo-test/src/main/java/com/pj/satoken/StpInterfaceImpl.java
View File

@ -1,12 +1,11 @@
package com.pj.satoken; package com.pj.satoken;
import cn.dev33.satoken.stp.StpInterface;
import org.springframework.stereotype.Component;
import java.util.ArrayList; import java.util.ArrayList;
import java.util.List; import java.util.List;
import org.springframework.stereotype.Component;
import cn.dev33.satoken.stp.StpInterface;
/** /**
* 自定义权限验证接口扩展 * 自定义权限验证接口扩展
*/ */