安全更新

power721 · Dec 26, 2023 · d2ab2e3 · d2ab2e3
1 parent 4479741
commit d2ab2e3
Show file tree

Hide file tree

Showing 8 changed files with 24 additions and 9 deletions.
diff --git a/src/main/java/cn/har01d/alist_tvbox/service/SubscriptionService.java b/src/main/java/cn/har01d/alist_tvbox/service/SubscriptionService.java
@@ -162,6 +162,15 @@ private void fixId(List<Subscription> list) {
         }
     }
 
+    public String getToken(String apiKey) {
+        String key = settingRepository.findById("api_key").map(Setting::getValue).orElse("");
+        if (key.equals(apiKey)) {
+            return token;
+        } else {
+            return "";
+        }
+    }
+
     public String getToken() {
         return token;
     }

diff --git a/src/main/java/cn/har01d/alist_tvbox/web/TvBoxController.java b/src/main/java/cn/har01d/alist_tvbox/web/TvBoxController.java
@@ -83,16 +83,22 @@ public List<String> getProfiles() {
     }
 
     @GetMapping("/token")
+    public String getToken2(HttpServletRequest request) {
+        String apiKey = request.getHeader("X-API-KEY");
+        return subscriptionService.getToken(apiKey);
+    }
+
+    @GetMapping("/api/token")
     public String getToken() {
         return subscriptionService.getToken();
     }
 
-    @PostMapping("/token")
+    @PostMapping("/api/token")
     public String createToken(@RequestBody TokenDto dto) {
         return subscriptionService.createToken(dto);
     }
 
-    @DeleteMapping("/token")
+    @DeleteMapping("/api/token")
     public void deleteToken() {
         subscriptionService.deleteToken();
     }

diff --git a/web-ui/src/views/ConfigView.vue b/web-ui/src/views/ConfigView.vue
@@ -277,12 +277,12 @@ const formatTime = (value: string | number) => {
 
 const updateToken = () => {
   if (form.value.enabledToken) {
-    axios.post('/token', {token: form.value.token}).then(({data}) => {
+    axios.post('/api/token', {token: form.value.token}).then(({data}) => {
       form.value.token = data
       ElMessage.success('成功开启安全订阅')
     })
   } else {
-    axios.delete('/token').then(() => {
+    axios.delete('/api/token').then(() => {
       form.value.token = ''
       ElMessage.info('成功关闭安全订阅')
     })

diff --git a/web-ui/src/views/SearchView.vue b/web-ui/src/views/SearchView.vue
@@ -55,7 +55,7 @@ const search = function () {
 }
 
 onMounted(() => {
-  axios.get('/token').then(({data}) => {
+  axios.get('/api/token').then(({data}) => {
     token.value = data ? '/' + data : ''
   })
 })

diff --git a/web-ui/src/views/SitesView.vue b/web-ui/src/views/SitesView.vue
@@ -418,7 +418,7 @@ const handleExceed: UploadProps['onExceed'] = (files: File[]) => {
 
 onMounted(() => {
   load()
-  axios.get('/token').then(({data}) => {
+  axios.get('/api/token').then(({data}) => {
     token.value = data ? '/' + data : ''
   })
 })

diff --git a/web-ui/src/views/SubView.vue b/web-ui/src/views/SubView.vue
@@ -43,7 +43,7 @@ watch(
 )
 
 onMounted(async () => {
-  token.value = await axios.get('/token').then(({data}) => {
+  token.value = await axios.get('/api/token').then(({data}) => {
     return  data ? '/' + data : ''
   })
   id.value = route.params.id as string

diff --git a/web-ui/src/views/SubscriptionsView.vue b/web-ui/src/views/SubscriptionsView.vue
@@ -188,7 +188,7 @@ const load = () => {
 }
 
 onMounted(() => {
-  axios.get('/token').then(({data}) => {
+  axios.get('/api/token').then(({data}) => {
     token.value = data ? '/' + data : ''
     load()
   })

diff --git a/web-ui/src/views/VodView.vue b/web-ui/src/views/VodView.vue
@@ -70,7 +70,7 @@ const load = function () {
 }
 
 onMounted(async () => {
-  token.value = await axios.get('/token').then(({data}) => {
+  token.value = await axios.get('/api/token').then(({data}) => {
     return data ? '/' + data : ''
   })
   url.value = currentUrl + getPath(type.value) + token.value