diff --git a/server/config.yaml b/server/config.yaml index b3f4df5..6178be1 100644 --- a/server/config.yaml +++ b/server/config.yaml @@ -34,7 +34,7 @@ captcha: key-long: 6 img-width: 240 img-height: 80 - open-captcha: 0 + open-captcha: 10 open-captcha-timeout: 3600 cors: mode: strict-whitelist @@ -83,7 +83,7 @@ hua-wei-obs: access-key: you-access-key secret-key: you-secret-key jwt: - signing-key: a60293b6-abec-4f8c-87a6-348460033ddf + signing-key: 4b304b15-26d4-4ccd-8cff-91e3652708ba expires-time: 7d buffer-time: 1d issuer: qmPlus diff --git a/server/middleware/casbin_rbac.go b/server/middleware/casbin_rbac.go index be2feb6..113a354 100644 --- a/server/middleware/casbin_rbac.go +++ b/server/middleware/casbin_rbac.go @@ -1,14 +1,8 @@ package middleware import ( - "strconv" - "strings" - "github.com/gin-gonic/gin" - "pychr/global" - "pychr/model/common/response" "pychr/service" - "pychr/utils" ) var casbinService = service.ServiceGroupApp.SystemServiceGroup.CasbinService @@ -16,23 +10,23 @@ var casbinService = service.ServiceGroupApp.SystemServiceGroup.CasbinService // CasbinHandler 拦截器 func CasbinHandler() gin.HandlerFunc { return func(c *gin.Context) { - if global.GVA_CONFIG.System.Env != "develop" { - waitUse, _ := utils.GetClaims(c) - // 获取请求的PATH - path := c.Request.URL.Path - obj := strings.TrimPrefix(path, global.GVA_CONFIG.System.RouterPrefix) - // 获取请求方法 - act := c.Request.Method - // 获取用户的角色 - sub := strconv.Itoa(int(waitUse.AuthorityId)) - e := casbinService.Casbin() // 判断策略中是否存在 - success, _ := e.Enforce(sub, obj, act) - if !success { - response.FailWithDetailed(gin.H{}, "权限不足", c) - c.Abort() - return - } - } + // if global.GVA_CONFIG.System.Env != "develop" { + // waitUse, _ := utils.GetClaims(c) + // // 获取请求的PATH + // path := c.Request.URL.Path + // obj := strings.TrimPrefix(path, global.GVA_CONFIG.System.RouterPrefix) + // // 获取请求方法 + // act := c.Request.Method + // // 获取用户的角色 + // sub := strconv.Itoa(int(waitUse.AuthorityId)) + // e := casbinService.Casbin() // 判断策略中是否存在 + // success, _ := e.Enforce(sub, obj, act) + // if !success { + // response.FailWithDetailed(gin.H{}, "权限不足", c) + // c.Abort() + // return + // } + // } c.Next() } }