token是否包含Bearer 提示鉴权失败问题

文件vendor/thinkcmf/cmf/src/controller/AdminBaseController.php 中验证token时如果token带了Bearer 则鉴权失败

修改如下：

```
    protected function initialize()
    {
        // 监听admin_init
        hook('admin_init');
        parent::initialize();
        $sessionAdminId = session('ADMIN_ID');
        if (!empty($sessionAdminId)) {
            if ($this->request->isPost()) {
                $token = $this->request->header('Authorization', '');
                if (empty($token)) {
                    $token = $this->request->header('XX-Token');
                }
                if (substr($token, 0, 7) === 'Bearer ') {
                    $token = substr($token, 7);
                }
                if (empty($token) || $token !== session('token')) {
                    session('ADMIN_ID', null);
                    $this->error('鉴权失败,请在Header中传入token',url('admin/Public/login'),['code'=>'10002']);
                }
            }

$user = UserModel::where('id', $sessionAdminId)->find();

if (!$this->checkAccess($sessionAdminId)) {
                $this->error(lang('no access'));
            }
            $this->assign('admin', $user);
        } else {
            if ($this->request->isPost()) {
                $this->error(lang('You are not logged in'), url('admin/Public/login'));
            } else {
                return $this->redirect(url('admin/Public/login'));
            }
        }
    }
```

GVP thinkcmf/ThinkCMF

内容风险标识

评论 (0)

GVPthinkcmf/ThinkCMF

内容风险标识