From 7bbecba231f91588fa3f130bd7cdba8ce69efa4b Mon Sep 17 00:00:00 2001 From: huliyong <2783385703@qq.com> Date: Fri, 7 Nov 2025 00:39:28 +0800 Subject: [PATCH] 1 --- .../org/jeecg/modules/system/security/IpAccessLimitInterceptor.java | 6 +++--- .../java/org/jeecg/modules/system/security/WebSecurityConfig.java | 1 + 2 files changed, 4 insertions(+), 3 deletions(-) diff --git a/jeecg-boot-module-system/src/main/java/org/jeecg/modules/system/security/IpAccessLimitInterceptor.java b/jeecg-boot-module-system/src/main/java/org/jeecg/modules/system/security/IpAccessLimitInterceptor.java index 6817ea8..5ca0ec2 100644 --- a/jeecg-boot-module-system/src/main/java/org/jeecg/modules/system/security/IpAccessLimitInterceptor.java +++ b/jeecg-boot-module-system/src/main/java/org/jeecg/modules/system/security/IpAccessLimitInterceptor.java @@ -31,9 +31,9 @@ public class IpAccessLimitInterceptor implements HandlerInterceptor { private static final String IP_REQUEST_TIMES_KEY = "ip_request_times:"; // 配置参数 - private static final int MAX_REQUESTS_PER_MINUTE = 120; // 每分钟最大请求数 - private static final int MAX_REQUESTS_PER_SECOND = 15; // 每秒最大请求数 - private static final int BLACKLIST_DURATION_MINUTES = 30; // 黑名单持续时间(分钟) + private static final int MAX_REQUESTS_PER_MINUTE = 360; // 每分钟最大请求数 + private static final int MAX_REQUESTS_PER_SECOND = 45; // 每秒最大请求数 + private static final int BLACKLIST_DURATION_MINUTES = 10; // 黑名单持续时间(分钟) private static final int VIOLATION_THRESHOLD = 3; // 违规次数阈值 @Override diff --git a/jeecg-boot-module-system/src/main/java/org/jeecg/modules/system/security/WebSecurityConfig.java b/jeecg-boot-module-system/src/main/java/org/jeecg/modules/system/security/WebSecurityConfig.java index bbf5beb..972ac8c 100644 --- a/jeecg-boot-module-system/src/main/java/org/jeecg/modules/system/security/WebSecurityConfig.java +++ b/jeecg-boot-module-system/src/main/java/org/jeecg/modules/system/security/WebSecurityConfig.java @@ -24,6 +24,7 @@ public class WebSecurityConfig implements WebMvcConfigurer { .addPathPatterns("/**") // 拦截所有请求 .excludePathPatterns( "/sys/login", // 排除登录接口 + "/city/browseRecord/addBrowseRecord", // 排除 "/sys/logout", // 排除登出接口 "/sys/randomImage", // 排除验证码接口 "/sys/checkCaptcha", // 排除验证码校验接口