From 8d6a2305324438726e7c009c6249aa7aa1319e5f Mon Sep 17 00:00:00 2001 From: RuoYi <yzz_ivy@163.com> Date: 星期一, 22 八月 2022 10:24:30 +0800 Subject: [PATCH] 优化Context信息,防止泄漏问题 --- src/main/java/com/ruoyi/framework/security/context/PermissionContextHolder.java | 12 +++++++++--- 1 files changed, 9 insertions(+), 3 deletions(-) diff --git a/src/main/java/com/ruoyi/framework/security/context/PermissionContextHolder.java b/src/main/java/com/ruoyi/framework/security/context/PermissionContextHolder.java index fcd93b6..2fcd65b 100644 --- a/src/main/java/com/ruoyi/framework/security/context/PermissionContextHolder.java +++ b/src/main/java/com/ruoyi/framework/security/context/PermissionContextHolder.java @@ -1,5 +1,9 @@ package com.ruoyi.framework.security.context; +import org.springframework.web.context.request.RequestAttributes; +import org.springframework.web.context.request.RequestContextHolder; +import com.ruoyi.common.core.text.Convert; + /** * 鏉冮檺淇℃伅 * @@ -7,15 +11,17 @@ */ public class PermissionContextHolder { - private static final ThreadLocal<String> contextHolder = new ThreadLocal<>(); + private static final String PERMISSION_CONTEXT_ATTRIBUTES = "PERMISSION_CONTEXT"; public static void setContext(String permission) { - contextHolder.set(permission); + RequestContextHolder.currentRequestAttributes().setAttribute(PERMISSION_CONTEXT_ATTRIBUTES, permission, + RequestAttributes.SCOPE_REQUEST); } public static String getContext() { - return contextHolder.get(); + return Convert.toStr(RequestContextHolder.currentRequestAttributes().getAttribute(PERMISSION_CONTEXT_ATTRIBUTES, + RequestAttributes.SCOPE_REQUEST)); } } -- Gitblit v1.9.3