renun/zfile
1
0
Fork 0
mirror of https://github.com/zfile-dev/zfile.git synced 2025-04-19 05:34:52 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

🐛 修复本地存储、FTP、SFTP、WebDav 未启用私有空间，仍然校验私有签名的 bug

Browse Source
This commit is contained in:
zhaojun
2022-07-13 20:10:08 +08:00
parent f1bac40af4
commit 4eb9a721fc
1 changed files with 8 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
src/main/java/im/zhaojun/zfile/common/controller/download/ProxyDownloadController.java
View File

@@ -68,10 +68,14 @@ public class ProxyDownloadController {
// 进行上传.
ProxyTransferService<?> proxyDownloadService = (ProxyTransferService<?>) storageServiceByKey;
Integer storageId = proxyDownloadService.getStorageId();
boolean valid = ProxyDownloadUrlUtils.validSignatureExpired(storageId, filePath, signature);
if (!valid) {
throw new IllegalArgumentException("签名无效或下载地址已过期.");
// 如果是私有空间才校验签名.
boolean privateStorage = proxyDownloadService.getParam().isPrivate();
if (privateStorage) {
Integer storageId = proxyDownloadService.getStorageId();
boolean valid = ProxyDownloadUrlUtils.validSignatureExpired(storageId, filePath, signature);
if (!valid) {
throw new IllegalArgumentException("签名无效或下载地址已过期.");
}
}
return proxyDownloadService.downloadToStream(filePath);