Procházet zdrojové kódy

Modify the method for checking request's type

sunyj před 8 roky
rodič
revize
de8010fd4a

+ 3 - 2
kanban-auth/src/main/java/com/uas/kanban/filter/SecurityInterceptor.java

@@ -21,6 +21,7 @@ import java.net.URLEncoder;
 import java.util.ArrayList;
 import java.util.Arrays;
 import java.util.List;
+import java.util.Objects;
 
 /**
  * 安全验证
@@ -67,8 +68,8 @@ public class SecurityInterceptor extends HandlerInterceptorAdapter {
         // session 中不存在登陆信息
         if (user == null) {
             logger.info("No session for path: " + url + " , redirecting to page: login ...");
-            // 如果是 XMLHttpRequest ,抛出异常,否则直接重定向
-            if (request.getHeader("X-Requested-With") != null) {
+            // 如果是 XMLHttpRequest ,抛出异常,否则重定向
+            if (Objects.equals("XMLHttpRequest", request.getHeader("X-Requested-With"))) {
                 throw new SecurityException("未登录");
             }
             String returnUrl = request.getRequestURL().toString();