安全扫描处理

ng/14/nginx.conf

@@ -28,7 +28,7 @@ http {
     types_hash_max_size 4096;
 
     # 限制请求体大小
-    client_max_body_size 100m;
+    client_max_body_size 50m;
 
     include             /etc/nginx/mime.types;
     default_type        application/octet-stream;

ng/15/nginx.conf

@@ -27,6 +27,9 @@ http {
     keepalive_timeout   65;
     types_hash_max_size 4096;
 
+    # 限制请求体大小
+    client_max_body_size 50m;
+
     include             /etc/nginx/mime.types;
     default_type        application/octet-stream;
 

zdxt-modules/zdxt-system/src/main/java/org/dromara/system/service/impl/SysRoleServiceImpl.java

@@ -1,5 +1,6 @@
 package org.dromara.system.service.impl;
 
+import cn.dev33.satoken.exception.ApiDisabledException;
 import cn.dev33.satoken.exception.NotLoginException;
 import cn.dev33.satoken.stp.StpUtil;
 import cn.hutool.core.bean.BeanUtil;
@@ -544,7 +545,13 @@ public class SysRoleServiceImpl implements ISysRoleService, RoleService {
         if (num == 0) {
             return;
         }
-        List<String> keys = StpUtil.searchTokenValue("", 0, -1, false);
+        List<String> keys;
+        try {
+            keys = StpUtil.searchTokenValue("", 0, -1, false);
+        } catch (ApiDisabledException e) {
+            // JWT模式下不支持searchTokenValue，跳过在线用户清理
+            return;
+        }
         if (CollUtil.isEmpty(keys)) {
             return;
         }
@@ -586,7 +593,13 @@ public class SysRoleServiceImpl implements ISysRoleService, RoleService {
      */
     @Override
     public void cleanOnlineUser(List<Long> userIds) {
-        List<String> keys = StpUtil.searchTokenValue("", 0, -1, false);
+        List<String> keys;
+        try {
+            keys = StpUtil.searchTokenValue("", 0, -1, false);
+        } catch (ApiDisabledException e) {
+            // JWT模式下不支持searchTokenValue，跳过在线用户清理
+            return;
+        }
         if (CollUtil.isEmpty(keys)) {
             return;
         }

zdxt-web-client/zdxt-efcode-enterprise-app/vite-config/index.js

@@ -42,22 +42,22 @@ const baseCfg = (viteEnv = {}) => {
 			open: false,
 			cors: true,
 			proxy: {
-                '/efcode20-ent-app/api/ent-ep': {
-                    target: VITE_PROXY_TARGET ||'http://139.186.148.21:8080',
-                    changeOrigin: true,
-                    rewrite: (path) => path.replace(/^\/efcode20-ent-app\/api\/ent-ep/, ''),
-                    configure: (proxy) => {
-                        proxy.on('proxyReq', (proxyReq, req) => {
-                            console.log(`[Proxy] ${req.method} ${req.url} → ${proxyReq.protocol}//${proxyReq.host}${proxyReq.path}`);
-                        });
-                        proxy.on('proxyRes', (proxyRes, req) => {
-                            console.log(`[Proxy] ${proxyRes.statusCode} ← ${req.method} ${req.url}`);
-                        });
-                        proxy.on('error', (err, req) => {
-                            console.error(`[Proxy Error] ${req.method} ${req.url}`, err.message);
-                        });
-                    }
-                },
+                // '/efcode20-ent-app/api/ent-ep': {
+                //     target: VITE_PROXY_TARGET ||'http://139.186.148.21:8080',
+                //     changeOrigin: true,
+                //     rewrite: (path) => path.replace(/^\/efcode20-ent-app\/api\/ent-ep/, ''),
+                //     configure: (proxy) => {
+                //         proxy.on('proxyReq', (proxyReq, req) => {
+                //             console.log(`[Proxy] ${req.method} ${req.url} → ${proxyReq.protocol}//${proxyReq.host}${proxyReq.path}`);
+                //         });
+                //         proxy.on('proxyRes', (proxyRes, req) => {
+                //             console.log(`[Proxy] ${proxyRes.statusCode} ← ${req.method} ${req.url}`);
+                //         });
+                //         proxy.on('error', (err, req) => {
+                //             console.error(`[Proxy Error] ${req.method} ${req.url}`, err.message);
+                //         });
+                //     }
+                // },
 				'/efcode20-ent-app/api': {
 					target: VITE_PROXY_TARGET ||'http://139.186.148.21:8080',
 					changeOrigin: true,
@@ -76,7 +76,12 @@ const baseCfg = (viteEnv = {}) => {
 				},
                 '/profile': {
                     target: VITE_PROXY_TARGET || 'http://139.186.148.21:8080',
-                    rewrite: (path) => path.replace(/^\/profile/, '/ent-ep/profile'),
+                    rewrite: (path) => {
+                        if (VITE_BASE_URL.includes('ent-ep')) {
+                            return path.replace(/^\/profile/, '/ent-ep/profile');
+                        }
+                        return path.replace(/^\/profile/, '/profile')
+                    },
                     changeOrigin: true,
                 }
 			}

zdxt-web-client/zdxt-efcode-enterprise-app/vite-env/.env.enterprise-dev-wmy

@@ -1,7 +1,7 @@
 # 企业端开发环境
 VITE_PORT = 12001
 VITE_PROXY_TARGET = 'http://139.186.148.21:8080'
-VITE_BASE_URL = '/efcode20-ent-app/api/ent-ep'
+VITE_BASE_URL = '/efcode20-ent-app/api'
 VITE_CONTEXT_PATH = '/efcode20-ent-app/'
 VITE_DEFAULT_LOGIN = '/enterprise/loginByPassword'
 VITE_FILE_URL = ''