/**
|
* BladeX Commercial License Agreement
|
* Copyright (c) 2018-2099, https://bladex.cn. All rights reserved.
|
* <p>
|
* Use of this software is governed by the Commercial License Agreement
|
* obtained after purchasing a license from BladeX.
|
* <p>
|
* 1. This software is for development use only under a valid license
|
* from BladeX.
|
* <p>
|
* 2. Redistribution of this software's source code to any third party
|
* without a commercial license is strictly prohibited.
|
* <p>
|
* 3. Licensees may copyright their own code but cannot use segments
|
* from this software for such purposes. Copyright of this software
|
* remains with BladeX.
|
* <p>
|
* Using this software signifies agreement to this License, and the software
|
* must not be used for illegal purposes.
|
* <p>
|
* THIS SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY. The author is
|
* not liable for any claims arising from secondary or illegal development.
|
* <p>
|
* Author: Chill Zhuang (bladejava@qq.com)
|
*/
|
package org.springblade.system.handler;
|
|
import org.springblade.core.secure.BladeUser;
|
import org.springblade.core.secure.handler.IPermissionHandler;
|
import org.springblade.core.secure.utils.AuthUtil;
|
import org.springblade.core.tool.utils.WebUtil;
|
|
import jakarta.servlet.http.HttpServletRequest;
|
import java.util.List;
|
|
import static org.springblade.system.cache.ApiScopeCache.*;
|
|
/**
|
* 接口权限校验类
|
*
|
* @author Chill
|
*/
|
public class ApiScopePermissionHandler implements IPermissionHandler {
|
|
@Override
|
public boolean permissionAll() {
|
HttpServletRequest request = WebUtil.getRequest();
|
BladeUser user = AuthUtil.getUser();
|
if (request == null || user == null) {
|
return false;
|
}
|
String uri = request.getRequestURI();
|
List<String> paths = permissionPath(user.getRoleId());
|
if (paths == null || paths.isEmpty()) {
|
return false;
|
}
|
return paths.stream().anyMatch(uri::contains);
|
}
|
|
@Override
|
public boolean hasPermission(String permission) {
|
HttpServletRequest request = WebUtil.getRequest();
|
BladeUser user = AuthUtil.getUser();
|
if (request == null || user == null) {
|
return false;
|
}
|
List<String> codes = permissionCode(permission, user.getRoleId());
|
return codes != null && !codes.isEmpty();
|
}
|
|
@Override
|
public boolean hasMenu(String permission) {
|
HttpServletRequest request = WebUtil.getRequest();
|
BladeUser user = AuthUtil.getUser();
|
if (request == null || user == null) {
|
return false;
|
}
|
List<String> codes = permissionMenu(permission, user.getRoleId());
|
return codes != null && !codes.isEmpty();
|
}
|
|
}
|