64 lines
2.6 KiB
Java
64 lines
2.6 KiB
Java
package com.cdzy.gateway.config;
|
|
|
|
import cn.dev33.satoken.reactor.filter.SaReactorFilter;
|
|
import cn.dev33.satoken.router.SaRouter;
|
|
import cn.dev33.satoken.stp.StpUtil;
|
|
import com.cdzy.gateway.component.AuthProperties;
|
|
import jakarta.annotation.Resource;
|
|
import org.springframework.beans.factory.annotation.Value;
|
|
import org.springframework.context.annotation.Bean;
|
|
import org.springframework.context.annotation.Configuration;
|
|
|
|
import java.util.List;
|
|
|
|
/**
|
|
* @author attiya
|
|
* @since 2025-03-18
|
|
*/
|
|
@Configuration
|
|
public class SaTokenConfigure {
|
|
|
|
@Value("${sa-token.is-check}")
|
|
private Boolean isCheck;
|
|
|
|
@Resource
|
|
private AuthProperties authProperties;
|
|
|
|
@Bean
|
|
public SaReactorFilter getSaReactorFilter() {
|
|
return new SaReactorFilter()
|
|
// 拦截所有请求
|
|
.addInclude("/**")
|
|
.setAuth(obj -> {
|
|
if (!Boolean.TRUE.equals(isCheck)) {
|
|
return; // 如果不开启校验，直接跳过
|
|
}
|
|
|
|
// 1. 放行不需要鉴权的路径
|
|
SaRouter.match("/user/doLogin").free(r -> {});
|
|
SaRouter.match("/staff/ebikeOperatorStaff/login").free(r -> {});
|
|
SaRouter.match("/payment/ebikeOrder/api/**").free(r -> {});
|
|
SaRouter.match("/payment/wxPayment/api/**").free(r -> {});
|
|
SaRouter.match("/operations/ebikeBikeInfo/api/**").free(r -> {});
|
|
|
|
// 2. 对 配置文件中需要鉴权的特定路径进行校验
|
|
List<String> requiredPaths = authProperties.getRequiredPaths();
|
|
if (requiredPaths != null && !requiredPaths.isEmpty()) {
|
|
for (String path : requiredPaths) {
|
|
SaRouter.match(path).check(r -> StpUtil.checkLogin());
|
|
}
|
|
}
|
|
|
|
// 3. 其他所有路径统一鉴权 (必须放在最后，避免覆盖前面的规则)
|
|
SaRouter.match("/**")
|
|
.notMatch("/user/doLogin")
|
|
.notMatch("/staff/ebikeOperatorStaff/login")
|
|
.notMatch("/payment/ebikeOrder/api/**")
|
|
.notMatch("/payment/wxPayment/api/**")
|
|
.notMatch("/operations/ebikeBikeInfo/api/**")
|
|
// 排除所有 user 下的路径，只有 requiredPaths 才鉴权
|
|
.notMatch("/user/**")
|
|
.check(r -> StpUtil.checkLogin());
|
|
});
|
|
}
|
|
} |