修改前端接口调用防止越权

piexlmax · piexlmax · commit 47d85427f703 · 2022-01-07T19:38:13.000+08:00
diff --git a/web/src/api/user.js b/web/src/api/user.js
@@ -112,6 +112,22 @@ export const setUserInfo = (data) => {
   })
 }
 
+// @Tags SysUser
+// @Summary 设置用户信息
+// @Security ApiKeyAuth
+// @accept application/json
+// @Produce application/json
+// @Param data body model.SysUser true "设置用户信息"
+// @Success 200 {string} string "{"success":true,"data":{},"msg":"修改成功"}"
+// @Router /user/setSelfInfo [put]
+export const setSelfInfo = (data) => {
+  return service({
+    url: '/user/setSelfInfo',
+    method: 'put',
+    data: data
+  })
+}
+
 // @Tags User
 // @Summary 设置用户权限
 // @Security ApiKeyAuth
diff --git a/web/src/store/module/user.js b/web/src/store/module/user.js
@@ -1,4 +1,4 @@
-import { login, getUserInfo, setUserInfo } from '@/api/user'
+import { login, getUserInfo, setSelfInfo } from '@/api/user'
 import { jsonInBlacklist } from '@/api/jwt'
 import router from '@/router/index'
 import { ElMessage } from 'element-plus'
@@ -81,7 +81,7 @@ export const user = {
       }
     },
     async changeSideMode({ commit, state }, data) {
-      const res = await setUserInfo({ sideMode: data, ID: state.userInfo.ID })
+      const res = await setSelfInfo({ sideMode: data })
       if (res.code === 0) {
         commit('ChangeSideMode', data)
         ElMessage({
diff --git a/web/src/view/person/person.vue b/web/src/view/person/person.vue
@@ -130,7 +130,7 @@
 
 <script>
 import ChooseImg from '@/components/chooseImg/index.vue'
-import { setUserInfo, changePassword } from '@/api/user.js'
+import { setSelfInfo, changePassword } from '@/api/user.js'
 
 import { mapGetters, mapMutations } from 'vuex'
 const path = import.meta.env.VITE_BASE_API
@@ -208,7 +208,7 @@ export default {
       this.$refs.chooseImg.open()
     },
     async enterImg(url) {
-      const res = await setUserInfo({ headerImg: url, ID: this.userInfo.ID })
+      const res = await setSelfInfo({ headerImg: url })
       if (res.code === 0) {
         this.ResetUserInfo({ headerImg: url })
         this.$message({
@@ -226,7 +226,7 @@ export default {
       this.editFlag = false
     },
     async enterEdit() {
-      const res = await setUserInfo({ nickName: this.nickName, ID: this.userInfo.ID })
+      const res = await setSelfInfo({ nickName: this.nickName })
       if (res.code === 0) {
         this.ResetUserInfo({ nickName: this.nickName })
         this.$message({
diff --git a/web/src/view/superAdmin/user/user.vue b/web/src/view/superAdmin/user/user.vue
@@ -128,7 +128,7 @@ import { mapGetters } from 'vuex'
 import CustomPic from '@/components/customPic/index.vue'
 import ChooseImg from '@/components/chooseImg/index.vue'
 import warningBar from '@/components/warningBar/warningBar.vue'
-import { setUserInfo, resetPassword } from '@/api/user.js'
+import { setSelfInfo, resetPassword } from '@/api/user.js'
 export default {
   name: 'Api',
   components: { CustomPic, ChooseImg, warningBar },
@@ -230,7 +230,7 @@ export default {
       row.editFlag = true
     },
     async enterEdit(row) {
-      const res = await setUserInfo({ nickName: row.nickName, ID: row.ID })
+      const res = await setSelfInfo({ nickName: row.nickName })
       if (res.code === 0) {
         this.$message({
           type: 'success',
