fixed: 后台数据权限bug

This commit is contained in:
none 2023-03-23 17:03:59 +08:00
parent fa5b25782f
commit 6c57a5f917
4 changed files with 13 additions and 2 deletions

View File

@ -28,9 +28,16 @@ public class BCtx {
}
private static Object get(String key) {
if (THREAD_LOCAL.get() == null) {
return null;
}
return THREAD_LOCAL.get().getOrDefault(key, null);
}
public static boolean isNull() {
return THREAD_LOCAL.get() == null;
}
public static void remove() {
THREAD_LOCAL.remove();
}

View File

@ -54,6 +54,9 @@ public class BackendBus {
}
public static String valueHidden(String permissionSlug, String type, String value) {
if (BCtx.isNull()) {//非后管环境返回原值
return value;
}
HashMap<String, Boolean> permissions = BCtx.getAdminPer();
if (permissions.get(permissionSlug) != null) {
return value;

View File

@ -1,5 +1,6 @@
package xyz.playedu.api.controller.frontend;
import lombok.extern.slf4j.Slf4j;
import org.apache.commons.collections4.MapUtils;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.validation.annotation.Validated;
@ -26,6 +27,7 @@ import java.util.stream.Collectors;
*/
@RestController
@RequestMapping("/api/v1/user")
@Slf4j
public class UserController {
@Autowired

View File

@ -59,9 +59,8 @@ public class FrontMiddleware implements HandlerInterceptor {
return responseTransform(response, 403, "当前学员已锁定无法登录");
}
FCtx.setUserId(user.getId());
FCtx.setUser(user);
FCtx.setJWtJti(token);
FCtx.setUserId(user.getId());
FCtx.setJWtJti(payload.getJti());
return HandlerInterceptor.super.preHandle(request, response, handler);