diff --git a/src/main/java/com/project/base/domain/utils/ServletUtils.java b/src/main/java/com/project/base/domain/utils/ServletUtils.java new file mode 100644 index 0000000..4c04793 --- /dev/null +++ b/src/main/java/com/project/base/domain/utils/ServletUtils.java @@ -0,0 +1,65 @@ +package com.project.base.domain.utils; + +import jakarta.servlet.http.HttpServletRequest; +import jakarta.servlet.http.HttpServletResponse; +import org.springframework.web.context.request.RequestContextHolder; +import org.springframework.web.context.request.ServletRequestAttributes; + +/** + * 客户端请求工具类 (Spring Boot 3 / Jakarta EE 版) + */ +public class ServletUtils { + + /** + * 获取当前请求对象 HttpServletRequest + */ + public static HttpServletRequest getRequest() { + ServletRequestAttributes attributes = (ServletRequestAttributes) RequestContextHolder.getRequestAttributes(); + return attributes != null ? attributes.getRequest() : null; + } + + /** + * 获取当前响应对象 HttpServletResponse + */ + public static HttpServletResponse getResponse() { + ServletRequestAttributes attributes = (ServletRequestAttributes) RequestContextHolder.getRequestAttributes(); + return attributes != null ? attributes.getResponse() : null; + } + + /** + * 获取请求头信息 + */ + public static String getHeader(String name) { + HttpServletRequest request = getRequest(); + return request != null ? request.getHeader(name) : null; + } + + /** + * 获取客户端真实 IP + * 考虑了 Nginx/网关 代理的情况 + */ + public static String getClientIp() { + HttpServletRequest request = getRequest(); + if (request == null) return "unknown"; + + // 处理常用的代理 Header + String ip = request.getHeader("x-forwarded-for"); + if (ip == null || ip.isEmpty() || "unknown".equalsIgnoreCase(ip)) { + ip = request.getHeader("Proxy-Client-IP"); + } + if (ip == null || ip.isEmpty() || "unknown".equalsIgnoreCase(ip)) { + ip = request.getHeader("WL-Proxy-Client-IP"); + } + if (ip == null || ip.isEmpty() || "unknown".equalsIgnoreCase(ip)) { + ip = request.getRemoteAddr(); + } + + // 对于通过多个代理的情况,第一个IP为客户端真实IP,多个IP按照','分割 + if (ip != null && ip.length() > 15) { + if (ip.indexOf(",") > 0) { + ip = ip.substring(0, ip.indexOf(",")); + } + } + return ip; + } +} \ No newline at end of file diff --git a/src/main/java/com/project/exam/domain/service/impl/AssemblePaperDomainServiceImpl.java b/src/main/java/com/project/exam/domain/service/impl/AssemblePaperDomainServiceImpl.java index 81ddfe0..c2d90b9 100644 --- a/src/main/java/com/project/exam/domain/service/impl/AssemblePaperDomainServiceImpl.java +++ b/src/main/java/com/project/exam/domain/service/impl/AssemblePaperDomainServiceImpl.java @@ -1,8 +1,12 @@ package com.project.exam.domain.service.impl; import cn.hutool.core.collection.CollUtil; +import cn.hutool.core.util.StrUtil; import com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper; import com.project.base.domain.exception.BusinessErrorException; +import com.project.base.domain.utils.ServletUtils; +import com.project.ding.domain.enums.UserRoleEnum; +import com.project.ding.utils.SecurityUtils; import com.project.exam.domain.service.AssemblePaperDomainService; import com.project.exam.domain.service.BuildExamRecordDomainService; import com.project.question.domain.dto.QuestionDTO; @@ -79,8 +83,12 @@ public class AssemblePaperDomainServiceImpl implements AssemblePaperDomainServic @Autowired private QuestionInventoryDomainService questionInventoryDomainService; + private final static String X_DEBUG_MODE_HEADER = "X-Debug-Mode"; + + private final static String X_DEBUG_MODE_VALUE = "true"; + @Override @Transactional(rollbackFor = Exception.class) public ExamRecordDTO assemblePaper(Long taskId, String userId) throws Exception { @@ -161,6 +169,13 @@ public class AssemblePaperDomainServiceImpl implements AssemblePaperDomainServic QuestionDTO.QuestionDetailDTO detail = questionDTO.getQuestionDetailDTO(); ExamRecordDTO.QuestionSnapshotDTO snapshot = new ExamRecordDTO.QuestionSnapshotDTO(); BeanUtils.copyProperties(detail , snapshot); + // 拥有admin权限且请求头有特殊标识才在此接口返回答案和解析 + boolean isDebugMode = SecurityUtils.hasRole(UserRoleEnum.ROLE_ADMIN.name()) + && StrUtil.equals(X_DEBUG_MODE_VALUE , ServletUtils.getHeader(X_DEBUG_MODE_HEADER)); + if (!isDebugMode) { + detail.setRightAnswer(null); + detail.setAnalysis(null); + } return snapshot; }).toList(); }