feat(audit): 收口领域写接口权限审计

2026-07-08 16:29:22 +08:00
parent 73e8dfa8c8
commit 18380edda8
24 changed files with 638 additions and 10 deletions
--- a/apps/server/src/common/auth/auth-context.service.ts
+++ b/apps/server/src/common/auth/auth-context.service.ts
@@ -29,7 +29,7 @@ export class AuthContextService {

    const headerUser: CurrentUser = {
      id: userId,
-      name: headerValue(request, 'x-ftb-user-name'),
+      name: decodeHeader(headerValue(request, 'x-ftb-user-name')),
      username: headerValue(request, 'x-ftb-user-username'),
      roleId: headerValue(request, 'x-ftb-user-role-id') || '',
      email: headerValue(request, 'x-ftb-user-email'),
@@ -60,3 +60,11 @@ function headerValue(request: AuthenticatedRequest, name: string): string {
  if (Array.isArray(value)) return value[0] ?? '';
  return value ?? '';
 }
+
+function decodeHeader(value: string): string {
+  try {
+    return decodeURIComponent(value);
+  } catch {
+    return value;
+  }
+}