Merge pull request #13686 from dataease/pr@dev-v2@perf_cas_api_auth

perf(X-Pack): CAS方式登录api鉴权
This commit is contained in:
taojinlong
2024-11-29 15:31:18 +08:00
committed by GitHub
3 changed files with 9 additions and 1 deletions

View File

@@ -12,6 +12,8 @@ public class AuthConstant {
public final static String CAS_X_USER = "X-CAS-USER";
public final static String DE_API_PREFIX = "/de2api";
public final static String DE_CASAPI_PREFIX = "/casbi/de2api";
public final static String DE_OIDCAPI_PREFIX = "/oidcbi/de2api";
// public final static String REFRESH_TOKEN_KEY = "X-DE-REFRESH-TOKEN";

View File

@@ -58,6 +58,12 @@ public class WhitelistUtils {
if (StringUtils.startsWith(requestURI, AuthConstant.DE_API_PREFIX)) {
requestURI = requestURI.replaceFirst(AuthConstant.DE_API_PREFIX, "");
}
if (StringUtils.startsWith(requestURI, AuthConstant.DE_CASAPI_PREFIX)) {
requestURI = requestURI.replaceFirst(AuthConstant.DE_CASAPI_PREFIX, "");
}
if (StringUtils.startsWith(requestURI, AuthConstant.DE_OIDCAPI_PREFIX)) {
requestURI = requestURI.replaceFirst(AuthConstant.DE_OIDCAPI_PREFIX, "");
}
return WHITE_PATH.contains(requestURI)
|| StringUtils.endsWithAny(requestURI, ".ico", "js", ".css", "svg", "png", "jpg", "js.map", ".otf", ".ttf", ".woff2")
|| StringUtils.startsWithAny(requestURI, "data:image")