刘帅
2026-09-08 572df690f72ed4a077d934823f261dec39b3cc7d
cloud-server-gateway/src/main/java/cn/mb/cloud/gateway/filter/PermissionsFilter.java
@@ -227,6 +227,10 @@
    public PermissionResult hasPermission(ServerWebExchange exchange, ServerHttpRequest request) {
        String uri = request.getURI().getRawPath();
        // 审计写入接口仅供服务通过注册中心直连,不能经公网网关伪造审计记录。
        if (uri.startsWith("/internal/audit-logs")) {
            return PermissionResult.FORBIDDEN;
        }
        if(uri.contains("v2/api-docs")){
            return PermissionResult.PASS;
        }