fix0806: APP端去掉全部的市辖区选择

hejianhao

2026-08-28 16a57a8fc6868cea9171a1119698572407a2fc03

 tcm-training-admin-backend/src/main/java/com/tcm/training/admin/config/SaTokenWebConfig.java

@@ -4,55 +4,107 @@
import cn.dev33.satoken.context.SaHolder;
import cn.dev33.satoken.stp.StpUtil;
import com.tcm.training.admin.common.xss.XssParamInterceptor;
import org.springframework.beans.factory.annotation.Value;
import com.tcm.training.admin.upload.LocalUploadProperties;
import org.springframework.context.annotation.Configuration;
import org.springframework.core.env.Environment;
import org.springframework.web.servlet.config.annotation.InterceptorRegistry;
import org.springframework.web.servlet.config.annotation.ResourceHandlerRegistry;
import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;

import java.io.File;
import java.util.Arrays;

@Configuration
public class SaTokenWebConfig implements WebMvcConfigurer {

    private final XssParamInterceptor xssParamInterceptor;
    private final LocalUploadProperties localUploadProperties;
    private final Environment environment;

    @Value("${app.upload.dir:uploads}")
    private String uploadDir;

    @Value("${app.upload.path-prefix:/uploads}")
    private String pathPrefix;

    public SaTokenWebConfig(XssParamInterceptor xssParamInterceptor) {
    public SaTokenWebConfig(XssParamInterceptor xssParamInterceptor,
                            LocalUploadProperties localUploadProperties,
                            Environment environment) {
        this.xssParamInterceptor = xssParamInterceptor;
        this.localUploadProperties = localUploadProperties;
        this.environment = environment;
    }

    /**
     * 注册 Sa-Token 与 XSS 拦截器。
     */
    @Override
    public void addInterceptors(InterceptorRegistry registry) {
        registry.addInterceptor(new SaInterceptor(handle -> {
                    if ("OPTIONS".equalsIgnoreCase(SaHolder.getRequest().getMethod())) {
                        return;
                    }
                    StpUtil.checkLogin();
                }))
        registry.addInterceptor(new SaInterceptor(handle -> handleAuth()))
                .addPathPatterns("/api/**", "/api/v1/**")
                .excludePathPatterns(
                        "/api/auth/login",
                        "/api/auth/captcha",
                        "/api/app-version-settings/check",
                        "/api/v1/app-version-settings/check"
                        localUploadProperties.getPathPrefix() + "/**"
                );

        registry.addInterceptor(xssParamInterceptor)
                .addPathPatterns("/api/**", "/api/v1/**");
    }

    /** 将本地上传目录映射为静态资源，可通过 /uploads/** 访问 */
    /**
     * 按请求路径切换管理员鉴权与 APP 鉴权。
     */
    private void handleAuth() {
        if ("OPTIONS".equalsIgnoreCase(SaHolder.getRequest().getMethod())) {
            return;
        }
        String requestPath = SaHolder.getRequest().getRequestPath();
        if (isAppApi(requestPath)) {
            // APP 端允许游客访问，只有真正需要用户身份的接口才在业务层显式要求登录。
            return;
        }
        if (isPublicAdminApi(requestPath)) {
            return;
        }
        StpUtil.checkLogin();
    }

    /**
     * 判断是否属于 APP 路由空间。
     */
    private boolean isAppApi(String requestPath) {
        return requestPath.startsWith("/api/app/") || requestPath.startsWith("/api/v1/app/");
    }

    /**
     * 判断当前后台路由是否允许匿名访问。
     */
    private boolean isPublicAdminApi(String requestPath) {
        return "/api/auth/login".equals(requestPath)
                || "/api/auth/captcha".equals(requestPath)
                || (!isProdProfile() && isJpushManualPushApi(requestPath))
                || requestPath.startsWith("/api/open/")
                || requestPath.startsWith("/api/v1/open/");
    }

    /**
     * 判断当前后台路由是否属于极光手动推送联调接口。
     */
    private boolean isJpushManualPushApi(String requestPath) {
        return "/api/jpush/manual-push".equals(requestPath)
                || "/api/v1/jpush/manual-push".equals(requestPath)
                || requestPath.startsWith("/api/jpush/manual-push/")
                || requestPath.startsWith("/api/v1/jpush/manual-push/");
    }

    /**
     * 判断当前是否为生产环境，生产环境手动推送接口必须校验后台登录态。
     */
    private boolean isProdProfile() {
        return Arrays.asList(environment.getActiveProfiles()).contains("prod");
    }

    /**
     * 将本地上传目录映射为静态资源，可通过 /uploads/** 访问。
     */
    @Override
    public void addResourceHandlers(ResourceHandlerRegistry registry) {
        // 转为绝对路径，确保 file: 协议正确
        String absPath = new File(uploadDir).getAbsolutePath();
        registry.addResourceHandler(pathPrefix + "/**")
        // 转为绝对路径，确保 file: 协议正确。
        String absPath = new File(localUploadProperties.getDir()).getAbsolutePath();
        registry.addResourceHandler(localUploadProperties.getPathPrefix() + "/**")
                .addResourceLocations("file:" + absPath + "/");
    }
}