联讯物业系统后台
blame | 历史 | 补丁 | 提交 | 提交对比 | ignore whitespace
wuxw
2019-02-02 9454b49eeabd56894550f1419f14e96f9d10c2ef 
 Api/src/main/java/com/java110/api/smo/impl/ApiServiceSMOImpl.java


@@ -22,6 +22,8 @@


import com.java110.event.service.api.ServiceDataFlowEventPublishing;


import com.java110.service.smo.IQueryServiceSMO;


import org.apache.commons.lang3.math.NumberUtils;


import org.slf4j.Logger;


import org.slf4j.LoggerFactory;


import org.springframework.beans.factory.annotation.Autowired;


import org.springframework.http.HttpStatus;


import org.springframework.http.ResponseEntity;


@@ -41,6 +43,7 @@


//@Transactional


public class ApiServiceSMOImpl extends LoggerEngine implements IApiServiceSMO {




    private final static Logger logger = LoggerFactory.getLogger(ApiServiceSMOImpl.class);




    @Autowired


    private RestTemplate restTemplate;


@@ -240,6 +243,10 @@


            DataFlowFactory.addCostTime(dataFlow, "judgeAuthority", "鉴权耗时", startDate);


            throw new NoAuthorityException(ResponseConstant.RESULT_CODE_NO_AUTHORITY_ERROR, "requestTime 格式不对，遵循yyyyMMddHHmmss格式");


        }


        //用户ID校验


        if (StringUtil.isNullOrNone(dataFlow.getUserId())){


             throw new NoAuthorityException(ResponseConstant.RESULT_CODE_NO_AUTHORITY_ERROR, "USER_ID 不能为空");


        }






        //判断 AppId 是否有权限操作相应的服务


@@ -252,6 +259,7 @@


            throw new NoAuthorityException(ResponseConstant.RESULT_CODE_NO_AUTHORITY_ERROR, "AppId 没有权限访问 serviceCode = " + dataFlow.getRequestHeaders().get(CommonConstant.HTTP_SERVICE));


        }






        //检验白名单


        List<String> whileListIp = dataFlow.getAppRoutes().get(0).getWhileListIp();


        if (whileListIp != null && whileListIp.size() > 0 && !whileListIp.contains(dataFlow.getIp())) {