/* * Copyright [2020-2030] [https://www.stylefeng.cn] * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * * Guns采用APACHE LICENSE 2.0开源协议,您在使用过程中,需要注意以下几点: * * 1.请不要删除和修改根目录下的LICENSE文件。 * 2.请不要删除和修改Guns源码头部的版权声明。 * 3.请保留源码和相关描述文件的项目出处,作者声明等。 * 4.分发源码时候,请注明软件出处 https://gitee.com/stylefeng/guns * 5.在修改包名,模块名称,项目代码等时,请注明软件出处 https://gitee.com/stylefeng/guns * 6.若您的项目无法满足以上几点,可申请商业授权 */ package cn.stylefeng.roses.kernel.security.api.expander; import cn.hutool.core.util.ArrayUtil; import cn.hutool.core.util.StrUtil; import cn.stylefeng.roses.kernel.config.api.context.ConfigContext; import cn.stylefeng.roses.kernel.security.api.constants.SecurityConstants; import java.util.ArrayList; import java.util.List; /** * 安全模块的配置 * * @author fengshuonan * @date 2021/2/19 8:49 */ public class SecurityConfigExpander { /** * 获取XSS过滤的url范围 * * @author fengshuonan * @date 2021/1/13 23:21 */ public static String[] getUrlPatterns() { String xssUrlIncludes = ConfigContext.me().getSysConfigValueWithDefault("SYS_XSS_URL_INCLUDES", String.class, SecurityConstants.DEFAULT_XSS_PATTERN); List split = StrUtil.split(xssUrlIncludes, ','); return ArrayUtil.toArray(split, String.class); } /** * 获取XSS排除过滤的url范围 * * @author fengshuonan * @date 2021/1/13 23:21 */ public static List getUrlExclusion() { String noneSecurityUrls = ConfigContext.me().getSysConfigValueWithDefault("SYS_XSS_URL_EXCLUSIONS", String.class, ""); if (StrUtil.isEmpty(noneSecurityUrls)) { return new ArrayList<>(); } else { return StrUtil.split(noneSecurityUrls, ','); } } /** * 获取AES秘钥 * * @return {@link String} * @author majianguo * @date 2021/7/5 10:15 **/ public static String getEncryptSecretKey() { return ConfigContext.me().getSysConfigValueWithDefault("SYS_ENCRYPT_SECRET_KEY", String.class, "Ux1dqQ22KxVjSYootgzMe776em8vWEGE"); } /** * 获取验证码的开关 * * @author fengshuonan * @date 2020/12/27 17:22 */ public static Boolean getCaptchaOpen() { return ConfigContext.me().getSysConfigValueWithDefault("SYS_CAPTCHA_OPEN", Boolean.class, SecurityConstants.DEFAULT_CAPTCHA_OPEN); } /** * 获取拖拽验证码的开关 * * @author fengshuonan * @date 2020/12/27 17:22 */ public static Boolean getDragCaptchaOpen() { return ConfigContext.me().getSysConfigValueWithDefault("SYS_DRAG_CAPTCHA_OPEN", Boolean.class, SecurityConstants.DEFAULT_CAPTCHA_OPEN); } }