/** * BladeX Commercial License Agreement * Copyright (c) 2018-2099, https://bladex.cn. All rights reserved. *

* Use of this software is governed by the Commercial License Agreement * obtained after purchasing a license from BladeX. *

* 1. This software is for development use only under a valid license * from BladeX. *

* 2. Redistribution of this software's source code to any third party * without a commercial license is strictly prohibited. *

* 3. Licensees may copyright their own code but cannot use segments * from this software for such purposes. Copyright of this software * remains with BladeX. *

* Using this software signifies agreement to this License, and the software * must not be used for illegal purposes. *

* THIS SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY. The author is * not liable for any claims arising from secondary or illegal development. *

* Author: Chill Zhuang (bladejava@qq.com) */ package org.springblade.system.handler; import org.springblade.core.secure.BladeUser; import org.springblade.core.secure.handler.IPermissionHandler; import org.springblade.core.secure.utils.AuthUtil; import org.springblade.core.tool.utils.WebUtil; import jakarta.servlet.http.HttpServletRequest; import java.util.List; import static org.springblade.system.cache.ApiScopeCache.*; /** * 接口权限校验类 * * @author Chill */ public class ApiScopePermissionHandler implements IPermissionHandler { @Override public boolean permissionAll() { HttpServletRequest request = WebUtil.getRequest(); BladeUser user = AuthUtil.getUser(); if (request == null || user == null) { return false; } String uri = request.getRequestURI(); List paths = permissionPath(user.getRoleId()); if (paths == null || paths.isEmpty()) { return false; } return paths.stream().anyMatch(uri::contains); } @Override public boolean hasPermission(String permission) { HttpServletRequest request = WebUtil.getRequest(); BladeUser user = AuthUtil.getUser(); if (request == null || user == null) { return false; } List codes = permissionCode(permission, user.getRoleId()); return codes != null && !codes.isEmpty(); } @Override public boolean hasMenu(String permission) { HttpServletRequest request = WebUtil.getRequest(); BladeUser user = AuthUtil.getUser(); if (request == null || user == null) { return false; } List codes = permissionMenu(permission, user.getRoleId()); return codes != null && !codes.isEmpty(); } }