| | |
|---|
| | | } |
|---|
| | | |
|---|
| | | /** |
|---|
| | | * Internal-only data source for the management sensitive-data query. The |
|---|
| | | * caller is authenticated and authorised by the management service; its |
|---|
| | | * Feign interceptor adds the header that permits the response to remain |
|---|
| | | * unmasked for that single request. |
|---|
| | | * 仅供管理端敏感信息查询使用的内部数据接口。 |
|---|
| | | * 调用方由管理服务完成认证和授权；其 Feign 拦截器会添加请求头， |
|---|
| | | * 以允许本次响应不进行脱敏。 |
|---|
| | | */ |
|---|
| | | @PostMapping("/internal/sensitive/app-user/{id}") |
|---|
| | | public Map<String, Object> sensitiveAppUser(@PathVariable("id") Integer id, |
|---|
| | |
|---|
| | | } |
|---|
| | | |
|---|
| | | /** |
|---|
| | | * Internal data source used when an APP booking submits its displayed, |
|---|
| | | * masked phone number. Limit the response to the single field needed for |
|---|
| | | * that booking; callers must use the internal sensitive-data header. |
|---|
| | | * APP 订场提交页面展示的脱敏手机号时使用的内部数据接口。 |
|---|
| | | * 仅返回该预约所需的手机号字段；调用方必须携带内部敏感数据访问请求头。 |
|---|
| | | */ |
|---|
| | | @PostMapping("/internal/sensitive/site-booking/app-user/{id}/phone") |
|---|
| | | public Map<String, Object> siteBookingPhone(@PathVariable("id") Integer id, |
|---|
| | |
|---|
| | | public void updateAppUser(@RequestBody TAppUser appUser) { |
|---|
| | | try { |
|---|
| | | TAppUser appUser1 = appUserService.getById(appUser.getId()); |
|---|
| | | // A management edit form may contain the displayed masked value. |
|---|
| | | // Never persist that display value over the original identifier. |
|---|
| | | // 管理端编辑表单可能携带页面展示的脱敏值。 |
|---|
| | | // 不得使用该展示值覆盖原始证件或联系方式。 |
|---|
| | | if (appUser.getPhone() != null && appUser.getPhone().contains("*")) appUser.setPhone(appUser1.getPhone()); |
|---|
| | | if (appUser.getIdCard() != null && appUser.getIdCard().contains("*")) appUser.setIdCard(appUser1.getIdCard()); |
|---|
| | | appUserService.updateById(appUser); |
|---|
