瀏覽代碼

拦截器的权限日志打印

zhaohongpeng 7 年之前
父節點
當前提交
cbfeaa099c
共有 1 個文件被更改,包括 7 次插入0 次删除
  1. 7 0
      src/main/java/com/uas/platform/b2c/core/filter/SSOInterceptor.java

+ 7 - 0
src/main/java/com/uas/platform/b2c/core/filter/SSOInterceptor.java

@@ -175,9 +175,15 @@ public class SSOInterceptor extends AbstractSSOInterceptor {
     private void accessDecision(HttpServletRequest request, User user) {
         //判断当前访问是否有权限限制
         Collection<ConfigAttribute> configAttributes = getAttributes(request);
+        String resourceUrl = request.getServletPath();
+        if (request.getPathInfo() != null) {
+            resourceUrl = resourceUrl + request.getPathInfo();
+        }
+        logger.info("【"+user.getUserUU()+"当前访问路径】:*******"+"resourceUrl:"+resourceUrl);
         if (null == configAttributes || configAttributes.size() == 0 || user.isSys() || user.getEnterprise() == null) {
             return;
         }
+        logger.info("【"+user.getUserUU()+"当前资源的权限】:*******"+"configAttributes:"+FastjsonUtils.toJson(configAttributes));
         Iterator<ConfigAttribute> iterator = configAttributes.iterator();
         String needPermission = null;
         if (null == authorities || !authorities.containsKey(user.getUserUU())) {
@@ -185,6 +191,7 @@ public class SSOInterceptor extends AbstractSSOInterceptor {
         }
         //获取当前登录用户的所有权限;
         Collection<GrantedAuthority> userAuthorities = authorities.get(user.getUserUU());
+        logger.info("【"+user.getUserUU()+"用户所有权限】:*******"+"userAuthorities:"+FastjsonUtils.toJson(userAuthorities));
         //匹配当前访问权限;
         while (iterator.hasNext()) {
             ConfigAttribute configAttribute = iterator.next();