From d8dced9058b1949609a14519523cbe47199f459e Mon Sep 17 00:00:00 2001
From: zrj <646384940@qq.com>
Date: Thu, 13 Jun 2024 16:26:03 +0800
Subject: [PATCH] 漏洞修复
---
blade-auth/src/main/java/org/springblade/system/user/controller/UserController.java | 8 +++++---
1 files changed, 5 insertions(+), 3 deletions(-)
diff --git a/blade-auth/src/main/java/org/springblade/system/user/controller/UserController.java b/blade-auth/src/main/java/org/springblade/system/user/controller/UserController.java
index 179b026..4314347 100644
--- a/blade-auth/src/main/java/org/springblade/system/user/controller/UserController.java
+++ b/blade-auth/src/main/java/org/springblade/system/user/controller/UserController.java
@@ -93,9 +93,11 @@
@ApiOperationSupport(order = 2)
@ApiOperation(value = "查看详情", notes = "传入id")
@GetMapping("/info")
- public R<UserVO> info(BladeUser user) {
- User detail = userService.getById(user.getUserId());
- return R.data(UserWrapper.build().entityVO(detail));
+ public R info() {
+ BladeUser bladeUser = AuthUtil.getUser();
+ User detail = userService.getById(bladeUser.getUserId());
+ detail.setPassword(null);
+ return R.data(detail);
}
/**
--
Gitblit v1.9.3