diff --git a/README.md b/README.md
index ba0ad503..1071d39d 100644
--- a/README.md
+++ b/README.md
@@ -21,7 +21,7 @@
[ 配套视频 tv.pig4cloud.com](https://www.bilibili.com/video/BV12t411B7e9)
-[PIGX 在线体验 pigx.pig4cloud.com](http://pigx.pig4cloud.com)
+[PIGX 在线体验 pigx.pigx.top](http://pigx.pigx.top)
[产品白皮书 paper.pig4cloud.com](https://paper.pig4cloud.com)
diff --git a/pig-common/pig-common-bom/pom.xml b/pig-common/pig-common-bom/pom.xml
index cae06993..5e915fce 100644
--- a/pig-common/pig-common-bom/pom.xml
+++ b/pig-common/pig-common-bom/pom.xml
@@ -21,7 +21,7 @@
1.8
1.8
4.9.9
- 0.0.34
+ 0.0.38
1.2.83
1.6.9
2.2.0
diff --git a/pig-common/pig-common-security/src/main/java/com/pig4cloud/pig/common/security/component/PigSecurityInnerAspect.java b/pig-common/pig-common-security/src/main/java/com/pig4cloud/pig/common/security/component/PigSecurityInnerAspect.java
index 0b449291..42f2ff1f 100644
--- a/pig-common/pig-common-security/src/main/java/com/pig4cloud/pig/common/security/component/PigSecurityInnerAspect.java
+++ b/pig-common/pig-common-security/src/main/java/com/pig4cloud/pig/common/security/component/PigSecurityInnerAspect.java
@@ -21,9 +21,9 @@ import com.pig4cloud.pig.common.security.annotation.Inner;
import lombok.RequiredArgsConstructor;
import lombok.SneakyThrows;
import lombok.extern.slf4j.Slf4j;
-import org.aspectj.lang.ProceedingJoinPoint;
-import org.aspectj.lang.annotation.Around;
+import org.aspectj.lang.JoinPoint;
import org.aspectj.lang.annotation.Aspect;
+import org.aspectj.lang.annotation.Before;
import org.springframework.core.Ordered;
import org.springframework.security.access.AccessDeniedException;
@@ -43,14 +43,19 @@ public class PigSecurityInnerAspect implements Ordered {
private final HttpServletRequest request;
@SneakyThrows
- @Around("@within(inner) || @annotation(inner)")
- public Object around(ProceedingJoinPoint point, Inner inner) {
+ @Before("@within(inner) || @annotation(inner)")
+ public void around(JoinPoint point, Inner inner) {
+ // 实际注入的inner实体由表达式后一个注解决定,即是方法上的@Inner注解实体,若方法上无@Inner注解,则获取类上的
+ // 这段代码没有意义,拦截的就是@Inner注解,怎么会为null呢
+ // if (inner == null) {
+ // Class> clazz = point.getTarget().getClass();
+ // inner = AnnotationUtils.findAnnotation(clazz, Inner.class);
+ // }
String header = request.getHeader(SecurityConstants.FROM);
if (inner.value() && !SecurityConstants.FROM_IN.equals(header)) {
log.warn("访问接口 {} 没有权限", point.getSignature().getName());
throw new AccessDeniedException("Access is denied");
}
- return point.proceed();
}
@Override