center/dataease-dm
center/dataease-dm
13
0
Fork 0
forked from github/dataease
Code Pull Requests Activity

fix(仪表板): 分享链接带密码访问报错不支持当前url

Browse Source
This commit is contained in:
fit2cloud-chenyw 2024-11-07 14:38:12 +08:00
parent 1e1629c6d5
commit 4b827be5c0
2 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
core/core-backend/src/main/java/io/dataease/share/interceptor/LinkInterceptor.java
View File

@ -19,7 +19,7 @@ import java.util.List;
@Component @Component
public class LinkInterceptor implements HandlerInterceptor { public class LinkInterceptor implements HandlerInterceptor {
private final static String whiteListText = "/user/ipInfo, /apisix/check, /datasetData/enumValueObj"; private final static String whiteListText = "/user/ipInfo, /apisix/check, /datasetData/enumValueObj, /dekey, /share/validate";
@Override @Override
@ -40,7 +40,7 @@ public class LinkInterceptor implements HandlerInterceptor {
if (StringUtils.startsWith(requestURI, AuthConstant.DE_API_PREFIX)) { if (StringUtils.startsWith(requestURI, AuthConstant.DE_API_PREFIX)) {
requestURI = requestURI.replaceFirst(AuthConstant.DE_API_PREFIX, ""); requestURI = requestURI.replaceFirst(AuthConstant.DE_API_PREFIX, "");
} }
boolean valid = whiteList.contains(requestURI); boolean valid = whiteList.contains(requestURI) || WhitelistUtils.match(requestURI);
if (!valid) { if (!valid) {
DEException.throwException("分享链接Token不支持访问当前url[" + requestURI + "]"); DEException.throwException("分享链接Token不支持访问当前url[" + requestURI + "]");
} }

1
core/core-backend/src/main/java/io/dataease/visualization/server/VisualizationLinkJumpService.java
View File

@ -137,6 +137,7 @@ public class VisualizationLinkJumpService implements VisualizationLinkJumpApi {
}); });
} }
@DeLinkPermit("#p0.targetDvId")
@Override @Override
public VisualizationLinkJumpBaseResponse queryTargetVisualizationJumpInfo(VisualizationLinkJumpBaseRequest request) { public VisualizationLinkJumpBaseResponse queryTargetVisualizationJumpInfo(VisualizationLinkJumpBaseRequest request) {
List<VisualizationLinkJumpDTO> result = extVisualizationLinkJumpMapper.getTargetVisualizationJumpInfo(request); List<VisualizationLinkJumpDTO> result = extVisualizationLinkJumpMapper.getTargetVisualizationJumpInfo(request);