Package com.sankcrm.erp.auth.application.app.captcha

Class CaptchaPolicyAccess

java.lang.Object

com.sankcrm.erp.auth.application.app.captcha.CaptchaPolicyAccess

@Component
public class CaptchaPolicyAccess
extends Object

验证验证码策略管理请求的 Bearer 身份、租户归属和 Casbin 授权；身份或权限无效时拒绝，授权依赖故障时安全失败。

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static final record	CaptchaPolicyAccess.AuditActor	非敏感审计主体标识。

Field Summary

Fields

Modifier and Type	Field	Description
static final String	RESOURCE

Constructor Summary

Constructors

Constructor	Description
CaptchaPolicyAccess()

Method Summary

Modifier and Type	Method	Description
CaptchaPolicyAccess.AuditActor	auditActor(jakarta.servlet.http.HttpServletRequest request)	从 Bearer 中提取审计标识；解析失败记录完整异常并返回 anonymous，不影响后续拒绝审计。
App	requireAuthorizedApp(String appId, jakarta.servlet.http.HttpServletRequest request, String action)	加载目标应用并执行严格授权校验。

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

RESOURCE

public static final String RESOURCE

See Also:

• Constant Field Values

Constructor Details

CaptchaPolicyAccess

public CaptchaPolicyAccess()

Method Details

requireAuthorizedApp

public App requireAuthorizedApp(String appId,
 jakarta.servlet.http.HttpServletRequest request,
 String action)

加载目标应用并执行严格授权校验。

Parameters:

appId - 目标应用编号

request - HTTP 请求；只从受信 Bearer 中提取 subject，不接受 appId/API header 回退

action - 固定的 GET 或 POST 动作

Returns:

已授权的应用

Throws:

com.sankcrm.erp.common.exception.CoreRuntimeException - 身份或权限拒绝时抛出无权限异常；授权依赖故障时抛出不泄漏细节的服务异常并保留 cause

auditActor

public CaptchaPolicyAccess.AuditActor auditActor(jakarta.servlet.http.HttpServletRequest request)

从 Bearer 中提取审计标识；解析失败记录完整异常并返回 anonymous，不影响后续拒绝审计。

Parameters:

request - 当前 HTTP 请求

Returns:

不含凭证的用户与 issuer 编号