修复服务器域名白名单规则
This commit is contained in:
@@ -60,11 +60,9 @@ public class JwtAuthenticationFilter extends OncePerRequestFilter {
|
||||
final SignCheckUtil checkUtil = new SignCheckUtil();
|
||||
String key = "WhiteDomain:" + jwtSubject.getTenantId();
|
||||
List<String> whiteDomains = redisUtil.get(key, List.class);
|
||||
if (whiteDomains != null) {
|
||||
if (!checkUtil.checkWhiteDomains(whiteDomains, request.getServerName())) {
|
||||
throw new UsernameNotFoundException("The requested domain name is not on the whitelist");
|
||||
}
|
||||
}
|
||||
|
||||
User user = userService.getByUsername(jwtSubject.getUsername(), jwtSubject.getTenantId());
|
||||
if (user == null) {
|
||||
|
||||
@@ -183,10 +183,9 @@ public class SignCheckUtil {
|
||||
return true;
|
||||
}
|
||||
// 服务器域名白名单列表
|
||||
whiteDomains.add("oa.gxwebsoft.com");
|
||||
whiteDomains.add("admin.gxwebsoft.com");
|
||||
whiteDomains.add("adm.wsdns.cn");
|
||||
whiteDomains.add("server.gxwebsoft.com");
|
||||
for(String item: whiteDomains){
|
||||
// System.out.println(">>> domainName = " + domainName);
|
||||
if(Objects.equals(item, domainName)){
|
||||
return true;
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user