Repository navigation
fix(授权): 修正资源组合并拒绝初始化不完整身份 - #373
Merged
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
显式声明多个资源 AND 校验时，原注解合并逻辑可能沿用 OR；认证初始化读取维度、权限或组装权限失败时，还会返回部分身份，令下游误将缺失约束的身份标记为有效。本 PR 在通用授权与认证初始化边界修复这两个问题。
验证：资源组合与 AOP 5 项、初始化与认证管理回归 15 项全部通过；覆盖中途维度失败、权限设置/定义读取失败、组装及监听失败、空维度、禁用用户、恢复及缓存复用。
git diff --check通过。mvn -o -pl hsweb-authorization/hsweb-authorization-basic -DreuseForks=false -Dtest=DefaultBasicAuthorizeDefinitionTest,AopAuthorizingControllerTest test mvn -o -pl hsweb-system/hsweb-system-authorization/hsweb-system-authorization-default -DreuseForks=false -Dtest=DefaultReactiveAuthenticationInitializeServiceTest,DefaultReactiveAuthenticationManagerTest,DimensionUserIdentityRegressionTest install发布后消费方须对齐修复后的 5.0.3-SNAPSHOT。已有错误身份快照需由消费方失效并重建；仅升级消费方、保留旧初始化器不足以关闭问题。