联讯物业系统后台
blame | 历史 | 补丁 | 提交 | 提交对比 | ignore whitespace
wuxw
2019-04-04 e68acd032f3f7a6b672873a57e21dd6069d41907 
 Api/src/main/java/com/java110/api/smo/impl/ApiServiceSMOImpl.java


@@ -11,6 +11,7 @@


import com.java110.common.log.LoggerEngine;


import com.java110.common.util.DateUtil;


import com.java110.common.util.StringUtil;


import com.java110.core.client.RestTemplate;


import com.java110.core.context.ApiDataFlow;


import com.java110.core.context.DataFlow;


import com.java110.core.factory.AuthenticationFactory;


@@ -22,11 +23,13 @@


import com.java110.event.service.api.ServiceDataFlowEventPublishing;


import com.java110.service.smo.IQueryServiceSMO;


import org.apache.commons.lang3.math.NumberUtils;


import org.slf4j.Logger;


import org.slf4j.LoggerFactory;


import org.springframework.beans.factory.annotation.Autowired;


import org.springframework.http.HttpStatus;


import org.springframework.http.ResponseEntity;


import org.springframework.stereotype.Service;


import org.springframework.web.client.RestTemplate;






import java.util.Date;


import java.util.List;


@@ -41,6 +44,7 @@


//@Transactional


public class ApiServiceSMOImpl extends LoggerEngine implements IApiServiceSMO {




    private final static Logger logger = LoggerFactory.getLogger(ApiServiceSMOImpl.class);




    @Autowired


    private RestTemplate restTemplate;


@@ -240,6 +244,10 @@


            DataFlowFactory.addCostTime(dataFlow, "judgeAuthority", "鉴权耗时", startDate);


            throw new NoAuthorityException(ResponseConstant.RESULT_CODE_NO_AUTHORITY_ERROR, "requestTime 格式不对，遵循yyyyMMddHHmmss格式");


        }


        //用户ID校验


        if (StringUtil.isNullOrNone(dataFlow.getUserId())){


             throw new NoAuthorityException(ResponseConstant.RESULT_CODE_NO_AUTHORITY_ERROR, "USER_ID 不能为空");


        }






        //判断 AppId 是否有权限操作相应的服务


@@ -252,6 +260,7 @@


            throw new NoAuthorityException(ResponseConstant.RESULT_CODE_NO_AUTHORITY_ERROR, "AppId 没有权限访问 serviceCode = " + dataFlow.getRequestHeaders().get(CommonConstant.HTTP_SERVICE));


        }






        //检验白名单


        List<String> whileListIp = dataFlow.getAppRoutes().get(0).getWhileListIp();


        if (whileListIp != null && whileListIp.size() > 0 && !whileListIp.contains(dataFlow.getIp())) {