From 572df690f72ed4a077d934823f261dec39b3cc7d Mon Sep 17 00:00:00 2001
From: 刘帅 <rr.iii@qq.com>
Date: 星期二, 08 九月 2026 17:11:34 +0800
Subject: [PATCH] feat&bug:文档内容修改

---
 cloud-server-gateway/src/main/java/cn/mb/cloud/gateway/filter/PermissionsFilter.java |    4 ++++
 1 files changed, 4 insertions(+), 0 deletions(-)

diff --git a/cloud-server-gateway/src/main/java/cn/mb/cloud/gateway/filter/PermissionsFilter.java b/cloud-server-gateway/src/main/java/cn/mb/cloud/gateway/filter/PermissionsFilter.java
index 3811282..be480e3 100644
--- a/cloud-server-gateway/src/main/java/cn/mb/cloud/gateway/filter/PermissionsFilter.java
+++ b/cloud-server-gateway/src/main/java/cn/mb/cloud/gateway/filter/PermissionsFilter.java
@@ -227,6 +227,10 @@
 
     public PermissionResult hasPermission(ServerWebExchange exchange, ServerHttpRequest request) {
         String uri = request.getURI().getRawPath();
+        // 审计写入接口仅供服务通过注册中心直连,不能经公网网关伪造审计记录。
+        if (uri.startsWith("/internal/audit-logs")) {
+            return PermissionResult.FORBIDDEN;
+        }
         if(uri.contains("v2/api-docs")){
             return PermissionResult.PASS;
         }

--
Gitblit v1.7.1