liuchang/fe_service_ebtp_frontend
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

7.25 渗透测试 前端secret修复，修改刷新token接口和code换token接口

Browse Source
This commit is contained in:
jl-zhoujl2
2023-07-25 15:05:29 +08:00
parent ff4671994e
commit 71f53b3268
13 changed files with 29 additions and 52 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
.eslintrc.js
View File

@ -7,8 +7,8 @@ module.exports = {
//商城2.0跳转地址 //商城2.0跳转地址
REACT_APP_MALL_V2_URL: false, REACT_APP_MALL_V2_URL: false,
//各系统跳转参数 //各系统跳转参数
REACT_APP_CLIENT_KEY: true, // REACT_APP_CLIENT_KEY: true,
REACT_APP_CLIENT_SECRET: true, // REACT_APP_CLIENT_SECRET: true,
//密码加密参数 //密码加密参数
REACT_APP_PASSWORD_CIPHERMODE: true, REACT_APP_PASSWORD_CIPHERMODE: true,
REACT_APP_PASSWORD_PUBLICKEY: true, REACT_APP_PASSWORD_PUBLICKEY: true,

4
config/config.UAT.ts
View File

@ -7,8 +7,8 @@ export default defineConfig({
REACT_APP_MALL_V2_URL:'http://111.198.162.67/zglt/index_hzf.jsp?id=dev', REACT_APP_MALL_V2_URL:'http://111.198.162.67/zglt/index_hzf.jsp?id=dev',
//各系统跳转参数 //各系统跳转参数
REACT_APP_CLIENT_KEY : 'KgPEkttG', // REACT_APP_CLIENT_KEY : 'KgPEkttG',
REACT_APP_CLIENT_SECRET :'ae5bdb183c502355d2055b3de73300aa73cbfdf3', // REACT_APP_CLIENT_SECRET :'ae5bdb183c502355d2055b3de73300aa73cbfdf3',
//密码加密参数 //密码加密参数
REACT_APP_PASSWORD_CIPHERMODE:'1', REACT_APP_PASSWORD_CIPHERMODE:'1',

4
config/config.dev.ts
View File

@ -7,8 +7,8 @@ export default defineConfig({
REACT_APP_MALL_V2_URL: 'http://111.198.162.67/zglt/index_hzf.jsp?id=dev', REACT_APP_MALL_V2_URL: 'http://111.198.162.67/zglt/index_hzf.jsp?id=dev',
//各系统跳转参数 //各系统跳转参数
REACT_APP_CLIENT_KEY: 'KgPEkttG', // REACT_APP_CLIENT_KEY: 'KgPEkttG',
REACT_APP_CLIENT_SECRET: 'ae5bdb183c502355d2055b3de73300aa73cbfdf3', // REACT_APP_CLIENT_SECRET: 'ae5bdb183c502355d2055b3de73300aa73cbfdf3',
//密码加密参数 //密码加密参数
REACT_APP_PASSWORD_CIPHERMODE: '1', REACT_APP_PASSWORD_CIPHERMODE: '1',

4
config/config.prod.ts
View File

@ -7,8 +7,8 @@ export default defineConfig({
REACT_APP_MALL_V2_URL:'http://111.198.162.67/zglt/index_hzf.jsp?id=dev', REACT_APP_MALL_V2_URL:'http://111.198.162.67/zglt/index_hzf.jsp?id=dev',
//各系统跳转参数 //各系统跳转参数
REACT_APP_CLIENT_KEY : 'KgPEkttG', // REACT_APP_CLIENT_KEY : 'KgPEkttG',
REACT_APP_CLIENT_SECRET :'ae5bdb183c502355d2055b3de73300aa73cbfdf3', // REACT_APP_CLIENT_SECRET :'ae5bdb183c502355d2055b3de73300aa73cbfdf3',
//密码加密参数 //密码加密参数
REACT_APP_PASSWORD_CIPHERMODE:'1', REACT_APP_PASSWORD_CIPHERMODE:'1',

4
config/config.sim.ts
View File

@ -7,8 +7,8 @@ export default defineConfig({
REACT_APP_MALL_V2_URL: 'http://111.198.162.67/zglt/index_hzf.jsp?id=dev', REACT_APP_MALL_V2_URL: 'http://111.198.162.67/zglt/index_hzf.jsp?id=dev',
//各系统跳转参数 //各系统跳转参数
REACT_APP_CLIENT_KEY: 'KgPEkttG', // REACT_APP_CLIENT_KEY: 'KgPEkttG',
REACT_APP_CLIENT_SECRET: 'ae5bdb183c502355d2055b3de73300aa73cbfdf3', // REACT_APP_CLIENT_SECRET: 'ae5bdb183c502355d2055b3de73300aa73cbfdf3',
//密码加密参数 //密码加密参数
REACT_APP_PASSWORD_CIPHERMODE: '1', REACT_APP_PASSWORD_CIPHERMODE: '1',

22
src/pages/LoadingPage/index.tsx
View File

@ -22,15 +22,15 @@ const Loading: React.FC<{}> = () => {
clientId: REACT_APP_CLIENT_KEY, clientId: REACT_APP_CLIENT_KEY,
scope: getUserScope() scope: getUserScope()
} }
const params = { // const params = {
grant_type: "refresh_token", // grant_type: "refresh_token",
refresh_token: getUserRefreshToken(), // refresh_token: getUserRefreshToken(),
client_id: REACT_APP_CLIENT_KEY, // client_id: REACT_APP_CLIENT_KEY,
client_secret: REACT_APP_CLIENT_SECRET, // client_secret: REACT_APP_CLIENT_SECRET,
} // }
const header = { // const header = {
clientId: REACT_APP_CLIENT_KEY, // clientId: REACT_APP_CLIENT_KEY,
} // }
if (userType == '0') {//联通用户 if (userType == '0') {//联通用户
await cloudReloadToken('', headers) await cloudReloadToken('', headers)
await getUserData(token, url, extra, 1) await getUserData(token, url, extra, 1)
@ -138,11 +138,9 @@ const Loading: React.FC<{}> = () => {
//获取协议部分 http: https: //获取协议部分 http: https:
const protocol = window.location.protocol const protocol = window.location.protocol
const grant_type = 'authorization_code'; const grant_type = 'authorization_code';
const client_id = REACT_APP_CLIENT_KEY;
const client_secret = REACT_APP_CLIENT_SECRET;
const redirect_uri = `${protocol}//${host}/redirect${e}`; const redirect_uri = `${protocol}//${host}/redirect${e}`;
let token = ''; let token = '';
await getTokenByCode({ grant_type, client_id, client_secret, redirect_uri, code }).then(res => { await getTokenByCode({ grant_type, redirect_uri, code }).then(res => {
if (res?.success == true) { if (res?.success == true) {
sessionStorage.setItem('Authorization', res?.data?.value) sessionStorage.setItem('Authorization', res?.data?.value)
token = 'Bearer ' + res?.data?.value; token = 'Bearer ' + res?.data?.value;

2
src/pages/LoadingPage/service.ts
View File

@ -18,7 +18,7 @@ export async function fgetUserMsg(params: any) {
* @returns * @returns
*/ */
export async function getTokenByCode(params: any) { export async function getTokenByCode(params: any) {
return request('/api/auth/oauth/token', { return request('/api/core-service-ebtp-userinfo/v1/auth/oauth/token', {
method: 'POST', method: 'POST',
params: params, params: params,
}); });

7
src/pages/usercloud/login/index.tsx
View File

@ -62,13 +62,8 @@ const Login: React.FC<LoginProps> = (props) => {
const params = { const params = {
grant_type: "refresh_token", grant_type: "refresh_token",
refresh_token: data?.refreshToken?.value, refresh_token: data?.refreshToken?.value,
client_id: REACT_APP_CLIENT_KEY,
client_secret: REACT_APP_CLIENT_SECRET,
} }
const header = { await refreshTokenApi(params).then(res => {
clientId: REACT_APP_CLIENT_KEY,
}
await refreshTokenApi(params, header).then(res => {
if (res?.success == true) { if (res?.success == true) {
sessionStorage.setItem('Authorization', res?.data?.value); sessionStorage.setItem('Authorization', res?.data?.value);
// sessionStorage.setItem('refreshToken', res?.data?.refreshToken.value); // sessionStorage.setItem('refreshToken', res?.data?.refreshToken.value);

7
src/pages/usercooper/login/index.tsx
View File

@ -63,13 +63,8 @@ const Login: React.FC<LoginProps> = (props) => {
const params = { const params = {
grant_type: "refresh_token", grant_type: "refresh_token",
refresh_token: data?.refreshToken?.value, refresh_token: data?.refreshToken?.value,
client_id: REACT_APP_CLIENT_KEY,
client_secret: REACT_APP_CLIENT_SECRET,
} }
const header = { await refreshTokenApi(params).then(res => {
clientId: REACT_APP_CLIENT_KEY,
}
await refreshTokenApi(params, header).then(res => {
if (res?.success == true) { if (res?.success == true) {
sessionStorage.setItem('Authorization', res?.data?.value); sessionStorage.setItem('Authorization', res?.data?.value);
// sessionStorage.setItem('refreshToken', res?.data?.refreshToken.value); // sessionStorage.setItem('refreshToken', res?.data?.refreshToken.value);

7
src/pages/userexpert/login/index.tsx
View File

@ -62,13 +62,8 @@ const Login: React.FC<LoginProps> = (props) => {
const params = { const params = {
grant_type: "refresh_token", grant_type: "refresh_token",
refresh_token: data?.refreshToken?.value, refresh_token: data?.refreshToken?.value,
client_id: REACT_APP_CLIENT_KEY,
client_secret: REACT_APP_CLIENT_SECRET,
} }
const header = { await refreshTokenApi(params).then(res => {
clientId: REACT_APP_CLIENT_KEY,
}
await refreshTokenApi(params, header).then(res => {
if (res?.success == true) { if (res?.success == true) {
sessionStorage.setItem('Authorization', res?.data?.value); sessionStorage.setItem('Authorization', res?.data?.value);
// sessionStorage.setItem('refreshToken', res?.data?.refreshToken.value); // sessionStorage.setItem('refreshToken', res?.data?.refreshToken.value);

7
src/pages/userformal/login/index.tsx
View File

@ -228,13 +228,8 @@ const Index: React.FC<{}> = () => {
const params = { const params = {
grant_type: "refresh_token", grant_type: "refresh_token",
refresh_token: data?.refreshToken?.value, refresh_token: data?.refreshToken?.value,
client_id: REACT_APP_CLIENT_KEY,
client_secret: REACT_APP_CLIENT_SECRET,
} }
const header = { await refreshTokenApi(params).then(res => {
clientId: REACT_APP_CLIENT_KEY,
}
await refreshTokenApi(params, header).then(res => {
if (res?.success == true) { if (res?.success == true) {
sessionStorage.setItem('Authorization', res?.data?.value); sessionStorage.setItem('Authorization', res?.data?.value);
// sessionStorage.setItem('refreshToken', res?.data?.refreshToken.value); // sessionStorage.setItem('refreshToken', res?.data?.refreshToken.value);

5
src/services/login.ts
View File

@ -95,12 +95,11 @@ export async function CloudfakeAccountLogin(params: LoginParamsType) {
* @param params * @param params
* @returns * @returns
*/ */
export async function refreshTokenApi(params: any, headers: any) { export async function refreshTokenApi(params: any) {
return request('/api/auth/oauth/token', { return request('/api/core-service-ebtp-userinfo/v1/auth/oauth/token', {
method: 'POST', method: 'POST',
requestType: 'form', requestType: 'form',
data: params, data: params,
headers: headers
}); });
} }

4
src/typings.d.ts vendored
View File

@ -43,9 +43,9 @@ declare const REACT_APP_ENV: 'test' | 'dev' | 'pre' | false;
/**ENV-商城2.0跳转地址 */ /**ENV-商城2.0跳转地址 */
declare const REACT_APP_MALL_V2_URL: string declare const REACT_APP_MALL_V2_URL: string
/**ENV-系统跳转参数KEY */ /**ENV-系统跳转参数KEY */
declare const REACT_APP_CLIENT_KEY: string // declare const REACT_APP_CLIENT_KEY: string
/**ENV-系统跳转参数SECRET */ /**ENV-系统跳转参数SECRET */
declare const REACT_APP_CLIENT_SECRET: string // declare const REACT_APP_CLIENT_SECRET: string
/**ENV-密码加密参数CIPHERMODE */ /**ENV-密码加密参数CIPHERMODE */
declare const REACT_APP_PASSWORD_CIPHERMODE: string declare const REACT_APP_PASSWORD_CIPHERMODE: string
/**ENV-密码加密参数PUBLICKEY */ /**ENV-密码加密参数PUBLICKEY */