public/dataease
1
0
Fork 0
mirror of https://github.com/dataease/dataease.git synced 2026-05-14 04:12:11 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix: 分享链接认证机制存在认证伪造绕过漏洞

Browse Source
This commit is contained in:
fit2cloud-chenyw
2026-03-30 11:00:07 +08:00
committed by fit2cloud-chenyw
parent d0372ef3a6
commit 00c169caa5
5 changed files with 72 additions and 34 deletions
Download Patch File Download Diff File Expand all files Collapse all files

33
sdk/common/src/main/java/io/dataease/auth/filter/TokenFilter.java
View File

@@ -1,5 +1,10 @@
package io.dataease.auth.filter;
import com.auth0.jwt.JWT;
import com.auth0.jwt.JWTVerifier;
import com.auth0.jwt.algorithms.Algorithm;
import com.auth0.jwt.interfaces.DecodedJWT;
import com.auth0.jwt.interfaces.Verification;
import io.dataease.auth.bo.TokenUserBO;
import io.dataease.constant.AuthConstant;
import io.dataease.exception.DEException;
@@ -15,8 +20,10 @@ import org.springframework.http.HttpHeaders;
import org.springframework.http.HttpStatus;
import org.springframework.http.HttpStatusCode;
import org.springframework.http.ResponseEntity;
import org.springframework.util.ReflectionUtils;
import java.io.IOException;
import java.lang.reflect.Method;
import java.net.URLEncoder;
import java.nio.charset.StandardCharsets;
import java.util.Objects;
@@ -72,8 +79,30 @@ public class TokenFilter implements Filter {
}
String linkToken = ServletUtils.getHead(AuthConstant.LINK_TOKEN_KEY);
if (StringUtils.isNotBlank(linkToken)) {
TokenUserBO tokenUserBO = TokenUtils.validateLinkToken(linkToken);
UserUtils.setUserInfo(tokenUserBO);
if (StringUtils.length(linkToken) < 100) {
DEException.throwException("token is invalid");
}
DecodedJWT jwt = JWT.decode(linkToken);
Long userId = jwt.getClaim("uid").asLong();
Long oid = jwt.getClaim("oid").asLong();
Long resourceId = jwt.getClaim("resourceId").asLong();
if (ObjectUtils.isEmpty(userId)) {
DEException.throwException("link token格式错误！");
}
Object shareSecretManage = CommonBeanFactory.getBean("shareSecretManage");
Method getSecretMethod = DeReflectUtil.findMethod(shareSecretManage.getClass(), "getSecret");
Object pwdObj = ReflectionUtils.invokeMethod(getSecretMethod, shareSecretManage, resourceId, userId);
String linkSecret = pwdObj.toString();
Algorithm algorithm = Algorithm.HMAC256(linkSecret);
Verification verification = JWT.require(algorithm);
JWTVerifier verifier = verification.build();
DecodedJWT decode = JWT.decode(linkToken);
algorithm.verify(decode);
verifier.verify(linkToken);
UserUtils.setUserInfo(new TokenUserBO(userId, oid));
filterChain.doFilter(servletRequest, servletResponse);
return;
}