org.apache.shenyu.plugin.portalauth

类 PortalAuthPlugin

java.lang.Object

org.apache.shenyu.plugin.base.AbstractShenyuPlugin

org.apache.shenyu.plugin.portalauth.PortalAuthPlugin

所有已实现的接口:

org.apache.shenyu.plugin.api.ShenyuPlugin

public class PortalAuthPlugin
extends org.apache.shenyu.plugin.base.AbstractShenyuPlugin

The portal auth plugin.

1. AES/ECB/PKCS5Padding decryption: reads request body, extracts "portalReq" field, decrypts it with the configured AES key, and replaces the body with decrypted content. Supports both JSON body ({"portalReq":"..."}) and form-urlencoded body (portalReq=...). 2. Menu permission check: reads "activeName" header, gets userId from CAS-injected header "X-mUserId", and calls HSF generic invocation to verify menu access permission.

Form-urlencoded support is used for /rest/transfer/** transparent proxy routes. The old gateway decrypts portalReq (AES) from form params, splits into key=value pairs, re-encodes with URLEncoder, and forwards as form body. This plugin replicates that behavior. Note: CAS plugin (order=1035) calls exchange.getFormData() for POST requests, which consumes the body for form-urlencoded content-type. So we use the cached formData instead of raw body.

构造器概要

构造器

构造器和说明
PortalAuthPlugin(java.util.List<org.springframework.http.codec.HttpMessageReader<?>> messageReaders) Instantiates a new Portal auth plugin.

方法概要

限定符和类型	方法和说明
protected reactor.core.publisher.Mono<java.lang.Void>	doExecute(org.springframework.web.server.ServerWebExchange exchange, org.apache.shenyu.plugin.api.ShenyuPluginChain chain, org.apache.shenyu.common.dto.SelectorData selector, org.apache.shenyu.common.dto.RuleData rule)
int	getOrder()
java.lang.String	named()

从类继承的方法 org.apache.shenyu.plugin.base.AbstractShenyuPlugin

execute, handleRuleIfNull, handleSelectorIfNull

从类继承的方法 java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

从接口继承的方法 org.apache.shenyu.plugin.api.ShenyuPlugin

after, before, skip, skip, skipExcept, skipExceptHttpLike

构造器详细资料

PortalAuthPlugin

public PortalAuthPlugin(java.util.List<org.springframework.http.codec.HttpMessageReader<?>> messageReaders)

Instantiates a new Portal auth plugin.

参数:

messageReaders - the message readers for body parsing

方法详细资料

doExecute

protected reactor.core.publisher.Mono<java.lang.Void> doExecute(org.springframework.web.server.ServerWebExchange exchange,
                                                                org.apache.shenyu.plugin.api.ShenyuPluginChain chain,
                                                                org.apache.shenyu.common.dto.SelectorData selector,
                                                                org.apache.shenyu.common.dto.RuleData rule)

指定者:

doExecute 在类中 org.apache.shenyu.plugin.base.AbstractShenyuPlugin

getOrder

public int getOrder()

named

public java.lang.String named()