jiulinxiri/rocketmq-dashboard
1
0
Fork 0
mirror of https://github.com/apache/rocketmq-dashboard.git synced 2025-09-12 04:40:32 +08:00
Code Issues Packages Projects Releases Wiki Activity

[ISSUE #157] ordinary user has no permission to access after setting server.servlet.context-path attribute in application.yml

Browse Source
This commit is contained in:
bruce lee
2023-05-29 16:34:00 +08:00
parent 6456630324
commit 2210e42e48
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
src/main/java/org/apache/rocketmq/dashboard/permisssion/PermissionAspect.java
View File

@@ -18,6 +18,8 @@ package org.apache.rocketmq.dashboard.permisssion;
import javax.annotation.Resource;
import javax.servlet.http.HttpServletRequest;
import org.apache.commons.lang3.StringUtils;
import org.apache.rocketmq.dashboard.config.RMQConfigure;
import org.apache.rocketmq.dashboard.exception.ServiceException;
import org.apache.rocketmq.dashboard.model.UserInfo;
@@ -27,6 +29,7 @@ import org.aspectj.lang.ProceedingJoinPoint;
import org.aspectj.lang.annotation.Around;
import org.aspectj.lang.annotation.Aspect;
import org.aspectj.lang.annotation.Pointcut;
import org.springframework.boot.autoconfigure.web.ServerProperties;
import org.springframework.stereotype.Component;
import org.springframework.web.context.request.RequestContextHolder;
import org.springframework.web.context.request.ServletRequestAttributes;
@@ -38,6 +41,9 @@ public class PermissionAspect {
@Resource
private RMQConfigure configure;
@Resource
private ServerProperties serverProperties;
@Resource
private PermissionService permissionService;
@@ -55,6 +61,7 @@ public class PermissionAspect {
if (configure.isLoginRequired()) {
HttpServletRequest request = ((ServletRequestAttributes) RequestContextHolder.getRequestAttributes()).getRequest();
String url = request.getRequestURI();
url = StringUtils.removeStart(url, serverProperties.getServlet().getContextPath());
UserInfo userInfo = (UserInfo) request.getSession().getAttribute(WebUtil.USER_INFO);
if (userInfo == null || userInfo.getUser() == null) {
throw new ServiceException(-1, "user not login");