1。流程报告生成优化

2.登录认证优化

approve/src/main/java/com/sdm/approve/filter/AuthFilter.java

@@ -1,46 +1,25 @@
 package com.sdm.approve.filter;
 
-import com.sdm.common.common.ThreadLocalContext;
-//import com.sdm.approve.service.UserService;
-import jakarta.servlet.*;
-import jakarta.servlet.http.HttpServletRequest;
-import jakarta.servlet.http.HttpServletResponse;
+import com.sdm.common.filter.BaseAuthFilter;
+import jakarta.servlet.FilterChain;
+import jakarta.servlet.ServletException;
+import jakarta.servlet.ServletRequest;
+import jakarta.servlet.ServletResponse;
 import lombok.extern.slf4j.Slf4j;
 import org.apache.commons.lang3.StringUtils;
 
-import javax.annotation.Resource;
 import java.io.IOException;
 
 @Slf4j
-public class AuthFilter implements Filter {
-//    @Resource
-//    private UserService userService;
+public class AuthFilter extends BaseAuthFilter {
 
     @Override
-    public void init(FilterConfig filterConfig) throws ServletException {
-        Filter.super.init(filterConfig);
-        log.info("----------- AuthFilter init ----------");
+    protected boolean shouldCheckWhitelist() {
+        return false; // approve模块不使用白名单
     }
 
     @Override
     public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain) throws IOException, ServletException {
-        if (servletRequest instanceof HttpServletRequest) {
-            HttpServletRequest req = (HttpServletRequest) servletRequest;
-            if(!ThreadLocalContext.verifyRequest(req))
-            {
-                HttpServletResponse response = (HttpServletResponse) servletResponse;
-                response.setStatus(HttpServletResponse.SC_UNAUTHORIZED); // 401
-                response.setContentType("application/json;charset=UTF-8");
-                response.getWriter().write("{\"code\":401,\"message\":\"未登录或认证信息缺失\"}");
-                return;
-            }
-        }
-        filterChain.doFilter(servletRequest, servletResponse);
-    }
-
-    @Override
-    public void destroy() {
-        Filter.super.destroy();
-        log.info("----------- AuthFilter destroy ----------");
+        super.doFilter(servletRequest, servletResponse, filterChain);
     }
 }