From 4ba9020b7c67cc318448a8aeac741492b23b4189 Mon Sep 17 00:00:00 2001
From: “mitao” <“2763622819@qq.com”>
Date: 星期二, 07 四月 2026 11:56:23 +0800
Subject: [PATCH] feat:APP端验证码登录及联调
---
tcm-training-admin-backend/src/main/java/com/tcm/training/admin/config/SaTokenWebConfig.java | 68 ++++++++++++++++++++++++++++------
1 files changed, 56 insertions(+), 12 deletions(-)
diff --git a/tcm-training-admin-backend/src/main/java/com/tcm/training/admin/config/SaTokenWebConfig.java b/tcm-training-admin-backend/src/main/java/com/tcm/training/admin/config/SaTokenWebConfig.java
index 091c90c..5903010 100644
--- a/tcm-training-admin-backend/src/main/java/com/tcm/training/admin/config/SaTokenWebConfig.java
+++ b/tcm-training-admin-backend/src/main/java/com/tcm/training/admin/config/SaTokenWebConfig.java
@@ -1,5 +1,6 @@
package com.tcm.training.admin.config;
+import com.tcm.training.admin.app.auth.support.StpAppUserUtil;
import cn.dev33.satoken.interceptor.SaInterceptor;
import cn.dev33.satoken.context.SaHolder;
import cn.dev33.satoken.stp.StpUtil;
@@ -27,30 +28,73 @@
this.xssParamInterceptor = xssParamInterceptor;
}
+ /**
+ * 注册 Sa-Token 与 XSS 拦截器。
+ */
@Override
public void addInterceptors(InterceptorRegistry registry) {
- registry.addInterceptor(new SaInterceptor(handle -> {
- if ("OPTIONS".equalsIgnoreCase(SaHolder.getRequest().getMethod())) {
- return;
- }
- StpUtil.checkLogin();
- }))
+ registry.addInterceptor(new SaInterceptor(handle -> handleAuth()))
.addPathPatterns("/api/**", "/api/v1/**")
.excludePathPatterns(
- "/api/auth/login",
- "/api/auth/captcha",
- "/api/app-version-settings/check",
- "/api/v1/app-version-settings/check"
+ pathPrefix + "/**"
);
registry.addInterceptor(xssParamInterceptor)
.addPathPatterns("/api/**", "/api/v1/**");
}
- /** 将本地上传目录映射为静态资源，可通过 /uploads/** 访问 */
+ /**
+ * 按请求路径切换管理员鉴权与 APP 鉴权。
+ */
+ private void handleAuth() {
+ if ("OPTIONS".equalsIgnoreCase(SaHolder.getRequest().getMethod())) {
+ return;
+ }
+ String requestPath = SaHolder.getRequest().getRequestPath();
+ if (isAppApi(requestPath)) {
+ if (isPublicAppApi(requestPath)) {
+ return;
+ }
+ StpAppUserUtil.checkLogin();
+ return;
+ }
+ if (isPublicAdminApi(requestPath)) {
+ return;
+ }
+ StpUtil.checkLogin();
+ }
+
+ /**
+ * 判断是否属于 APP 路由空间。
+ */
+ private boolean isAppApi(String requestPath) {
+ return requestPath.startsWith("/api/app/") || requestPath.startsWith("/api/v1/app/");
+ }
+
+ /**
+ * 判断当前 APP 路由是否允许匿名访问。
+ */
+ private boolean isPublicAppApi(String requestPath) {
+ return requestPath.startsWith("/api/app/auth/")
+ || requestPath.startsWith("/api/v1/app/auth/")
+ || "/api/app/version/check".equals(requestPath)
+ || "/api/v1/app/version/check".equals(requestPath);
+ }
+
+ /**
+ * 判断当前后台路由是否允许匿名访问。
+ */
+ private boolean isPublicAdminApi(String requestPath) {
+ return "/api/auth/login".equals(requestPath)
+ || "/api/auth/captcha".equals(requestPath);
+ }
+
+ /**
+ * 将本地上传目录映射为静态资源，可通过 /uploads/** 访问。
+ */
@Override
public void addResourceHandlers(ResourceHandlerRegistry registry) {
- // 转为绝对路径，确保 file: 协议正确
+ // 转为绝对路径，确保 file: 协议正确。
String absPath = new File(uploadDir).getAbsolutePath();
registry.addResourceHandler(pathPrefix + "/**")
.addResourceLocations("file:" + absPath + "/");
--
Gitblit v1.7.1