提交登录修改
This commit is contained in:
@@ -13,9 +13,9 @@ from queue import Queue, Empty
|
||||
from concurrent.futures import ThreadPoolExecutor, as_completed
|
||||
from urllib.parse import urlparse
|
||||
|
||||
from flask import Blueprint, request, jsonify, session, send_file, redirect, Response
|
||||
from flask import Blueprint, request, jsonify, send_file, redirect, Response
|
||||
|
||||
from app_common import get_db, login_required, BASE_DIR
|
||||
from app_common import get_db, login_required, current_user_id, BASE_DIR
|
||||
from config import bucket_path,JAVA_API_BASE
|
||||
from brand_spider.main import single_file_handle, TaskCancelledError
|
||||
|
||||
@@ -70,12 +70,12 @@ def _get_uid_from_request_headers():
|
||||
|
||||
def _resolve_user_id():
|
||||
"""
|
||||
优先使用请求头 uid;没有请求头 uid 时回退到 session['user_id']。
|
||||
优先使用请求头 uid;没有请求头 uid 时回退到 JWT 解析的当前用户。
|
||||
若二者同时存在但不一致,则视为无效请求并返回 None。
|
||||
"""
|
||||
req_uid = _get_uid_from_request_headers()
|
||||
if req_uid is not None:
|
||||
sess_uid = session.get('user_id')
|
||||
sess_uid = current_user_id()
|
||||
if sess_uid is not None:
|
||||
try:
|
||||
if int(sess_uid) != int(req_uid):
|
||||
@@ -84,7 +84,7 @@ def _resolve_user_id():
|
||||
if str(sess_uid) != str(req_uid):
|
||||
return None
|
||||
return req_uid
|
||||
return session.get('user_id')
|
||||
return current_user_id()
|
||||
|
||||
|
||||
def _get_user_id_or_error():
|
||||
|
||||
Reference in New Issue
Block a user