hz/java-servers
1
0
Fork 0
mirror of https://codeup.aliyun.com/67762337eccfc218f6110e0e/per-boe/java-servers.git synced 2025-12-11 03:46:50 +08:00
Code Issues Packages Projects Releases Wiki Activity

视频进行工号验证

Browse Source
This commit is contained in:
zhaolongfei
2024-11-11 15:12:27 +08:00
parent d9d1e0fecc
commit ee74f47261
1 changed files with 8 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
servers/boe-server-all/src/main/java/com/xboe/module/course/api/CourseWareApi.java
View File

@@ -14,6 +14,7 @@ import lombok.extern.slf4j.Slf4j;
import org.apache.commons.lang3.StringUtils; import org.apache.commons.lang3.StringUtils;
import org.springframework.beans.factory.annotation.Autowired; import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.data.redis.core.RedisTemplate; import org.springframework.data.redis.core.RedisTemplate;
import org.springframework.web.bind.annotation.CookieValue;
import org.springframework.web.bind.annotation.GetMapping; import org.springframework.web.bind.annotation.GetMapping;
import org.springframework.web.bind.annotation.RequestMapping; import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RestController; import org.springframework.web.bind.annotation.RestController;
@@ -99,8 +100,8 @@ public class CourseWareApi extends ApiBaseController {
* @throws Exception * @throws Exception
*/ */
@GetMapping("/resource") @GetMapping("/resource")
public JsonResponse<String> getVideo(HttpServletRequest request, HttpServletResponse response, String sign) throws Exception { public JsonResponse<String> getVideo(HttpServletRequest request, HttpServletResponse response, String sign,
@CookieValue String token) throws Exception {
if (StringUtils.isBlank(sign)) { if (StringUtils.isBlank(sign)) {
return badRequest("非法请求"); return badRequest("非法请求");
} }
@@ -119,10 +120,6 @@ public class CourseWareApi extends ApiBaseController {
if(!has) { if(!has) {
return badRequest("页面不存在"); return badRequest("页面不存在");
} }
String token = request.getHeader("Xboe-Access-Token");
if (StringUtils.isEmpty(token)) {
token = request.getHeader("token");
}
// 读取cookies中的时间 // 读取cookies中的时间
String cookieTime = getSignTimeCookie(request); String cookieTime = getSignTimeCookie(request);
if (StringUtils.isBlank(cookieTime)) { if (StringUtils.isBlank(cookieTime)) {
@@ -155,11 +152,12 @@ public class CourseWareApi extends ApiBaseController {
return badRequest("验证错误"); return badRequest("验证错误");
} }
String time = signStr.substring(0, signStr.indexOf("/"));// 时间字符中，long // String time = signStr.substring(0, signStr.indexOf("/"));// 时间字符中，long
String workNum = signStr.substring(2, signStr.indexOf("/"));// 工号，long // String workNum = signStr.substring(2, signStr.indexOf("/"));// 工号，long
String[] array = signStr.split("/");
String cfid = signStr.substring(index+1);// 文件路径 String cfid = signStr.substring(index+1);// 文件路径
if (!workNum.equals(userNo)){ if (!array[2].equals(userNo)){
return badRequest("工号不匹配"); return badRequest("token验证失败");
} }
// if (!time.equals(cookieTime)) { // if (!time.equals(cookieTime)) {
// log.info("请求头时间和解析后的时间对比:"+"解析时间:"+time+" 请求头时间："+cookieTime); // log.info("请求头时间和解析后的时间对比:"+"解析时间:"+time+" 请求头时间："+cookieTime);