Browse Source

去掉xssFilter校验bean

dev
wxz 2 years ago
parent
commit
462914d2cd
  1. 26
      tduck-api/src/main/java/com/tduck/cloud/api/config/FilterConfig.java
  2. 2
      tduck-api/src/main/java/com/tduck/cloud/api/web/filter/SignAuthFilter.java

26
tduck-api/src/main/java/com/tduck/cloud/api/config/FilterConfig.java

@ -54,19 +54,19 @@ public class FilterConfig {
*
* @return
*/
@Bean
@ConditionalOnProperty(prefix = "platform.sign", name = "enable", havingValue = "true", matchIfMissing = true)
public FilterRegistrationBean xssFilterRegistration() {
FilterRegistrationBean registration = new FilterRegistrationBean();
registration.setDispatcherTypes(DispatcherType.REQUEST);
SignAuthFilter signAuthFilter = new SignAuthFilter();
signAuthFilter.setPlatformSignProperties(platformSignProperties);
registration.setFilter(signAuthFilter);
registration.addUrlPatterns("/*");
registration.setName("signAuthFilter");
registration.setOrder(Integer.MAX_VALUE - 3);
return registration;
}
// @Bean
// @ConditionalOnProperty(prefix = "platform.sign", name = "enable", havingValue = "true", matchIfMissing = true)
// public FilterRegistrationBean xssFilterRegistration() {
// FilterRegistrationBean registration = new FilterRegistrationBean();
// registration.setDispatcherTypes(DispatcherType.REQUEST);
// SignAuthFilter signAuthFilter = new SignAuthFilter();
// signAuthFilter.setPlatformSignProperties(platformSignProperties);
// registration.setFilter(signAuthFilter);
// registration.addUrlPatterns("/*");
// registration.setName("signAuthFilter");
// registration.setOrder(Integer.MAX_VALUE - 3);
// return registration;
// }
/**
* 请求日志

2
tduck-api/src/main/java/com/tduck/cloud/api/web/filter/SignAuthFilter.java

@ -32,7 +32,7 @@ public class SignAuthFilter implements Filter {
/**
* 最大有效时间 默认 10秒钟失效 超出10s失效
*/
private final static Long MAX_EFFECTIVE_TIMESTAMP = 10L * 1000;
private final static Long MAX_EFFECTIVE_TIMESTAMP = 300L * 1000;
private PlatformSignProperties platformSignProperties;
@Override

Loading…
Cancel
Save