| | |
| | | String username = JwtUtils.getUserName(claims); |
| | | String userType = JwtUtils.getUserType(claims); |
| | | String operationUserKey = JwtUtils.getOperationUserKey(claims); |
| | | if (!checkPathPermission(userType, url)) { |
| | | return unauthorizedResponse(exchange, "无权访问当前资源"); |
| | | } |
| | | String redisKey = ""; |
| | | if ("system".equals(userType)) { |
| | | redisKey = StringUtils.isNotBlank(userkey) ? getTokenKey(userkey) : ""; |
| | |
| | | private String getTokenKey(String token) { |
| | | return CacheConstants.LOGIN_TOKEN_KEY + token; |
| | | } |
| | | |
| | | private boolean checkPathPermission(String userType, String url) { |
| | | boolean appPath = StringUtils.isNotBlank(url) && url.contains("/maintenance-app"); |
| | | if ("operation".equals(userType)) { |
| | | return appPath; |
| | | } |
| | | if ("system".equals(userType)) { |
| | | return !appPath; |
| | | } |
| | | return true; |
| | | } |
| | | |
| | | /** |
| | | * 获取请求token |
| | |
| | | public int getOrder() { |
| | | return -300; |
| | | } |
| | | } |
| | | } |