|
@@ -198,12 +198,16 @@ func (c *BaseAuthController) Prepare() {
|
|
|
for _, v := range list {
|
|
|
api += v.Api + ","
|
|
|
}
|
|
|
+ //处理uri请求,去除前缀和参数
|
|
|
api = strings.TrimRight(api,",")
|
|
|
uri = strings.Replace(uri,"/adminapi","",1)
|
|
|
+ uris := strings.Split(uri,"?")
|
|
|
+ uri = uris[0]
|
|
|
+ fmt.Println("uri:",uri)
|
|
|
if !strings.Contains(api,uri) {
|
|
|
- //c.JSON(models.BaseResponse{Ret: 403, Msg: "无权访问!", ErrMsg: "无权访问!"}, false, false)
|
|
|
- //c.StopRun()
|
|
|
- //return
|
|
|
+ c.JSON(models.BaseResponse{Ret: 403, Msg: "无权访问!", ErrMsg: "无权访问!"}, false, false)
|
|
|
+ c.StopRun()
|
|
|
+ return
|
|
|
}
|
|
|
} else {
|
|
|
c.JSON(models.BaseResponse{Ret: 408, Msg: "请求异常,请联系客服!", ErrMsg: "POST之外的请求,暂不支持"}, false, false)
|