Files
2026-03-01 01:43:46 +08:00

45 lines
5.2 KiB
Markdown
Raw Permalink Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
# 任务
- [x] 开发:IBS 7.17.0 版本梳理。(冲突域名对子账号的影响)
- [x] 开发:BPM、配管交互接口文档中平面涉及范围。
# 日志
1. /api/log/auth 直接放行,不做任何权限校验
所有路径加前缀:NEW_API_URL
1. /api/log/… 转换为:`_API_LOG_`
2. /api/log/callback/… 转换为: `_API_LOG_CALLBACK_`
也就是会变为类似这种,对应到权限库:
NEW_API_URL_API_LOG_
| originPath 匹配条件 | 域名来源 | 提取细节 |
| -------------------------------------------------------------------------------------------------------------- | ------------------- | --------------------------------------------------------------------------------------------------------- |
| startsWith("/api/statistic") 或 startsWith("/api/monitor") | query 参数 | request.getParameterValues("domain")(多值) |
| 等于 "/api/log/subscribe/getTaskId" 或等于 "/api/content/status" | query 参数 | request.getParameter("domain")(单值,包装成数组) |
| 等于 "/api/log/subscribe/add" | JSON body | 取 domains 数组(字符串数组) |
| 等于 "/api/log" | JSON body | 取 domain(字符串,包装为单元素数组) |
| 等于 "/api/log/subscribe/update" | JSON body | 合并 delete_domains + increase_domains;若两者都空则 直接放行(isDomainExist=true |
| 等于 "/api/content/create/urls" 或 startsWith("/api/content/update/urls") 或 startsWith("/api/content/distribute") | JSON body | checkDomainExistUrls(request,"content_urls","url",userId):从 content_urls[*].url 抽域名 |
| 等于 "/api/content/dirs/purge" | JSON body | 取 dirs 数组(字符串 URL),对每个元素 getDomainFromUrl(url) 抽域名 |
| 等于 "/api/url/deny" | JSON body | 取 tasks[*].domain |
| 等于 "/api/node/schedule/vips" | query 参数 | request.getParameter("sdomain")(注意字段名不是 domain |
| 等于 "/api/url/ban" | JSON body + CP 域名转换 | checkDomainExistUrls(request,"urls","url",userId, tenantIdOrigin):从 urls[*].url 抽域名后再做 cpDomainconversion |
| 等于 "/api/url/ban/query" | query 参数 + CP 域名转换 | 从 request.getParameter("url") 抽域名 →cpDomainconversion→ 校验 |
| 等于 "/api/url/warm" 或等于 "/api/url/refresh" | JSON body | checkDomainExistUrls(request,"tasks","content_url",userId) |
| 等于 "/api/toutiao/url/ban" | JSON body | checkDomainExistUrls(request,"urls","url",userId) |
| 等于 "/api/url/tou/query/url" | JSON body | checkDomainExistUrls(request,"tasks","url",userId) |
| 等于 "/api/url/domain/cpid/query" | JSON body | checkDomainExistUrls(request,"banOrUnBan","url",userId) |
| 其他未覆盖路径 | 不校验域名 | 直接 isDomainExist=true(注释:没有被捕获的域名参数,全部放行) |
BPM
4.2域名操作反馈接口
# 总结
梳理需求。