From c96fbe6b0aeb413a17c429133ee6d81d138144b9 Mon Sep 17 00:00:00 2001
From: liujie <1793218484@qq.com>
Date: 星期二, 09 六月 2026 10:58:52 +0800
Subject: [PATCH] Merge branch '1.0' of http://120.76.84.145:10101/gitblit/r/java/Robotaxi into 1.0
---
xp-robotaxi-gateway-boot/src/main/java/com/xiaopeng/gateway/filter/AuthFilter.java | 16 +++++++++++++++-
1 files changed, 15 insertions(+), 1 deletions(-)
diff --git a/xp-robotaxi-gateway-boot/src/main/java/com/xiaopeng/gateway/filter/AuthFilter.java b/xp-robotaxi-gateway-boot/src/main/java/com/xiaopeng/gateway/filter/AuthFilter.java
index 5d4b50f..2217a1d 100644
--- a/xp-robotaxi-gateway-boot/src/main/java/com/xiaopeng/gateway/filter/AuthFilter.java
+++ b/xp-robotaxi-gateway-boot/src/main/java/com/xiaopeng/gateway/filter/AuthFilter.java
@@ -89,6 +89,9 @@
String username = JwtUtils.getUserName(claims);
String userType = JwtUtils.getUserType(claims);
String operationUserKey = JwtUtils.getOperationUserKey(claims);
+ if (!checkPathPermission(userType, url)) {
+ return unauthorizedResponse(exchange, "无权访问当前资源");
+ }
String redisKey = "";
if ("system".equals(userType)) {
redisKey = StringUtils.isNotBlank(userkey) ? getTokenKey(userkey) : "";
@@ -153,6 +156,17 @@
private String getTokenKey(String token) {
return CacheConstants.LOGIN_TOKEN_KEY + token;
}
+
+ private boolean checkPathPermission(String userType, String url) {
+ boolean appPath = StringUtils.isNotBlank(url) && url.contains("/maintenance-app");
+ if ("operation".equals(userType)) {
+ return appPath;
+ }
+ if ("system".equals(userType)) {
+ return !appPath;
+ }
+ return true;
+ }
/**
* 获取请求token
@@ -194,4 +208,4 @@
public int getOrder() {
return -300;
}
-}
\ No newline at end of file
+}
--
Gitblit v1.7.1