|
|
# 权限校验
|
|
|
|
|
|
## 核心理念
|
|
|
|
|
|
建立用户-组-权限资源的关系，对用户进行鉴权
|
|
|
|
|
|
[](https://imgtu.com/i/o4WeAI)
|
|
|
|
|
|
|
|
|
|
|
|
## 鉴权流程
|
|
|
|
|
|
### 在权限表（permission）中插入资源信息
|
|
|
|
|
|
```sql
|
|
|
INSERT INTO permission (id, res_type, area, res_full_path, res_full_name, operation_bit, expire_date, created_time,
|
|
|
updated_time, created_by, updated_by)
|
|
|
VALUES (101, 'hive', 'china', '/test.db/test', '/测试库/测试表', 'select', '2099-12-26 10:45:26', now(), now(),
|
|
|
'system', 'system'),
|
|
|
(102, 'hive', 'china', '/test.db/test1', '/测试库/测试表1', 'select', '2099-12-26 10:45:26', now(), now(),
|
|
|
'system', 'system'),
|
|
|
(103, 'hive', 'china', '/test.db', '/测试库', 'select', '2099-12-26 10:45:26', now(), now(),
|
|
|
'system', 'system');
|
|
|
```
|
|
|
|
|
|
### 在组-权限表建立连接
|
|
|
|
|
|
```sql
|
|
|
INSERT INTO group_permission_relation (id, group_id, permission_id, created_time, updated_time, created_by, updated_by)
|
|
|
VALUES (1, 101, 101, now(), now(), 'system', 'system'),
|
|
|
(2, 101, 102, now(), now(), 'system', 'system'),
|
|
|
(3, 101, 103, now(), now(), 'system', 'system'),
|
|
|
(4, 102, 101, now(), now(), 'system', 'system'),
|
|
|
(5, 102, 102, now(), now(), 'system', 'system'),
|
|
|
(6, 103, 101, now(), now(), 'system', 'system'),
|
|
|
(7, 103, 102, now(), now(), 'system', 'system'),
|
|
|
(8, 103, 103, now(), now(), 'system', 'system');
|
|
|
```
|
|
|
|
|
|
### 访问接口进行鉴权
|
|
|
|
|
|
```shell
|
|
|
curl --location --request POST 'http://127.0.0.1:8443/authentication-server/auth/data/permission' \
|
|
|
--header 'Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VyX25hbWUiOiJhZG1pbiIsInNjb3BlIjpbInJlYWQiXSwib3JnYW5pemF0aW9uIjoiYWRtaW4iLCJleHAiOjE2MzkwNzQ1MTMsImF1dGhvcml0aWVzIjpbIkFETUlOIl0sImp0aSI6IllsVVhlV2d1VFBRbGdmSHYyY0VGOC1seEVGRSIsImNsaWVudF9pZCI6InRlc3RfY2xpZW50In0.1JqUvfv5i9wd9F7hWYW-Xafoc5bh9tFEupIoVYW09nU' \
|
|
|
--header 'User-Agent: apifox/1.0.0 (https://www.apifox.cn)' \
|
|
|
--header 'Content-Type: application/json' \
|
|
|
--data-raw '{
|
|
|
"resFullName": "/测试库/测试表",
|
|
|
"area": "china",
|
|
|
"resType": "hive",
|
|
|
"operationBit": "select",
|
|
|
"resFullPath": "/test.db/test",
|
|
|
"groupCode": "101"
|
|
|
}'
|
|
|
```
|
|
|
|
|
|
[](https://imgtu.com/i/o4WzrQ)
|
|
|
|