test-version22
/
MeterSphere
mirror of https://gitee.com/fit2cloud-feizhiyun/MeterSphere.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

fix: 没有登录不需要校验csrf

This commit is contained in:
Captain.B 2021-03-10 16:56:19 +08:00
parent 9de992a91c
commit 7c40fa3377
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
backend/src/main/java/io/metersphere/security/CsrfFilter.java
View File

@ -26,6 +26,7 @@ public class CsrfFilter extends AnonymousFilter {
if (!SecurityUtils.getSubject().isAuthenticated()) { if (!SecurityUtils.getSubject().isAuthenticated()) {
((HttpServletResponse) response).setHeader("Authentication-Status", "invalid"); ((HttpServletResponse) response).setHeader("Authentication-Status", "invalid");
return true;
} }
// api 过来的请求 // api 过来的请求
if (ApiKeyHandler.isApiKeyCall(WebUtils.toHttp(request))) { if (ApiKeyHandler.isApiKeyCall(WebUtils.toHttp(request))) {