forked from github/dataease
fix(仪表板): 分享链接带密码访问报错不支持当前url
This commit is contained in:
parent
1e1629c6d5
commit
4b827be5c0
@ -19,7 +19,7 @@ import java.util.List;
|
||||
@Component
|
||||
public class LinkInterceptor implements HandlerInterceptor {
|
||||
|
||||
private final static String whiteListText = "/user/ipInfo, /apisix/check, /datasetData/enumValueObj";
|
||||
private final static String whiteListText = "/user/ipInfo, /apisix/check, /datasetData/enumValueObj, /dekey, /share/validate";
|
||||
|
||||
|
||||
@Override
|
||||
@ -40,7 +40,7 @@ public class LinkInterceptor implements HandlerInterceptor {
|
||||
if (StringUtils.startsWith(requestURI, AuthConstant.DE_API_PREFIX)) {
|
||||
requestURI = requestURI.replaceFirst(AuthConstant.DE_API_PREFIX, "");
|
||||
}
|
||||
boolean valid = whiteList.contains(requestURI);
|
||||
boolean valid = whiteList.contains(requestURI) || WhitelistUtils.match(requestURI);
|
||||
if (!valid) {
|
||||
DEException.throwException("分享链接Token不支持访问当前url[" + requestURI + "]");
|
||||
}
|
||||
|
@ -137,6 +137,7 @@ public class VisualizationLinkJumpService implements VisualizationLinkJumpApi {
|
||||
});
|
||||
}
|
||||
|
||||
@DeLinkPermit("#p0.targetDvId")
|
||||
@Override
|
||||
public VisualizationLinkJumpBaseResponse queryTargetVisualizationJumpInfo(VisualizationLinkJumpBaseRequest request) {
|
||||
List<VisualizationLinkJumpDTO> result = extVisualizationLinkJumpMapper.getTargetVisualizationJumpInfo(request);
|
||||
|
Loading…
Reference in New Issue
Block a user