github/dataease
github/dataease
3
0
Fork 1
mirror of https://github.com/dataease/dataease.git synced 2025-02-25 03:52:59 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

feat: 加密公共链接中的用户ID

Browse Source
This commit is contained in:
taojinlong 2022-03-28 17:01:03 +08:00
parent 2213a565f8
commit 879890fe54
6 changed files with 18 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
backend/src/main/java/io/dataease/controller/panel/server/LinkServer.java
View File

@ -65,9 +65,14 @@ public class LinkServer implements LinkApi {
link = URLDecoder.decode(link, "UTF-8");
String json = panelLinkService.decryptParam(link);
String user = request.getUser();
user = URLDecoder.decode(user, "UTF-8");
user = panelLinkService.decryptParam(user);
ValidateDto dto = new ValidateDto();
dto.setUserId(user);
String resourceId = json;
PanelLink one = panelLinkService.findOne(resourceId, request.getUser());
PanelLink one = panelLinkService.findOne(resourceId, Long.valueOf(user));
dto.setResourceId(resourceId);
if (ObjectUtils.isEmpty(one)) {
dto.setValid(false);

2
backend/src/main/java/io/dataease/controller/request/panel/link/LinkValidateRequest.java
View File

@ -8,5 +8,5 @@ import java.io.Serializable;
public class LinkValidateRequest implements Serializable {
private String link;
private Long user;
private String user;
}

2
backend/src/main/java/io/dataease/dto/panel/link/ValidateDto.java
View File

@ -17,4 +17,6 @@ public class ValidateDto {
private boolean passPwd;
@ApiModelProperty("资源ID")
private String resourceId;
@ApiModelProperty("用户ID")
private String userId;
}

2
backend/src/main/java/io/dataease/service/panel/PanelLinkService.java
View File

@ -155,7 +155,7 @@ public class PanelLinkService {
private String buildLinkParam(PanelLink link) {
String linkParam = encrypt(link.getResourceId());
if (link.getUserId() != null) {
linkParam = linkParam + USERPARAM + link.getUserId().toString();
linkParam = linkParam + USERPARAM + encrypt(link.getUserId().toString());
}
return linkParam;
}

2
frontend/public/link.html
View File

@ -38,7 +38,7 @@
url += '&terminal=' + terminal
}
if (user) {
url += '&user=' + user
url += '&user=' + encodeURIComponent(user)
}
if (attachParams) {
url += '&attachParams=' + attachParams

12
frontend/src/views/link/index.vue
View File

@ -1,9 +1,9 @@
<template>
<div style="height: 100%;">
<link-error v-if="showIndex===0" :resource-id="resourceId" />
<link-pwd v-if="showIndex===1" :resource-id="resourceId" :user="user" @fresh-token="refreshToken" />
<link-view v-if="showIndex===2" :resource-id="resourceId" :user="user"/>
<link-expire v-if="showIndex===3" :resource-id="resourceId" :user="user"/>
<link-pwd v-if="showIndex===1" :resource-id="resourceId" :user="userId" @fresh-token="refreshToken" />
<link-view v-if="showIndex===2" :resource-id="resourceId" :user="userId"/>
<link-expire v-if="showIndex===3" :resource-id="resourceId" :user="userId"/>
</div>
</template>
<script>
@ -21,6 +21,7 @@ export default {
data() {
return {
resourceId: null,
userId: null,
PARAMKEY: 'link',
link: null,
user: null,
@ -46,10 +47,11 @@ export default {
this.showError()
return
}
let params = this.user ? { link: encodeURIComponent(this.link), user: this.user} : { link: encodeURIComponent(this.link)};
let params = this.user ? { link: encodeURIComponent(this.link), user: encodeURIComponent(this.user)} : { link: encodeURIComponent(this.link)};
validate(params).then(res => {
const { resourceId, valid, enablePwd, passPwd, expire } = res.data
const { resourceId, valid, enablePwd, passPwd, expire, userId} = res.data
this.resourceId = resourceId
this.userId = userId
// 如果链接无效 直接显示无效页面
if (!valid || !resourceId) {
this.showError()