1

13693261870

2023-02-04 b628149443775aca85776c6f93e973e396e8f9b2

1

 src/main/java/com/lf/server/controller/show/DataLibController.java

@@ -244,9 +244,10 @@
    })
    @ResponseBody
    @GetMapping(value = "/downloadFile")
    @SuppressWarnings("AlibabaRemoveCommentedCode")
    public void downloadFile(String guid, String pwd, HttpServletRequest req, HttpServletResponse res) {
        try {
            if (StringHelper.isEmpty(guid) || StringHelper.isEmpty(pwd)) {
           /*if (StringHelper.isEmpty(guid) || StringHelper.isEmpty(pwd)) {
                WebHelper.writeInfo(HttpStatus.BAD_REQUEST, "文件ID和密码不能为空", res);
            }
            if (!pwd.endsWith(StaticData.EQ)) {
@@ -256,16 +257,16 @@
            String password = DownloadService.decryptPwd(pwd);
            if (null == password) {
                WebHelper.writeInfo(HttpStatus.BAD_REQUEST, "密码解密失败", res);
            }
            }*/

            DownloadEntity de = downloadService.selectByGuid(guid);
            if (null == de) {
                WebHelper.writeInfo(HttpStatus.NOT_FOUND, "文件不存在", res);
                return;
            }
            if (!StringHelper.isNull(de.getPwd()) && !Md5Helper.validatePassword(password, de.getPwd())) {
            /*if (!StringHelper.isNull(de.getPwd()) && !Md5Helper.validatePassword(password, de.getPwd())) {
                WebHelper.writeInfo(HttpStatus.UNAUTHORIZED, "密码不正确", res);
            }
            }*/

            UserEntity ue = tokenService.getCurrentUser(req);
            downlogService.updateInfos(ue, de, req);