fix:完善权限管理,限制普通用户访问内容

This commit is contained in:
czhqwer
2025-03-29 23:40:58 +08:00
parent 34b55159bd
commit a312010f17
3 changed files with 32 additions and 18 deletions
@@ -7,6 +7,7 @@ import cn.czh.service.IStorageConfigService;
import org.springframework.web.bind.annotation.*;
import javax.annotation.Resource;
import javax.servlet.http.HttpServletRequest;
import javax.validation.Valid;
@RestController
@@ -42,7 +43,8 @@ public class ConfigController {
}
@GetMapping("/getPassword")
public Result<?> getPassword() {
return Result.success(authService.getMainUserPassword());
public Result<?> getPassword(HttpServletRequest request) {
boolean mainUser = authService.isMainUser(request.getRemoteAddr());
return Result.success(authService.getMainUserPassword() + (mainUser ? 1 : 0));
}
}