Prechádzať zdrojové kódy

fix(ai): 修复AI内容审核功能中的安全令牌配置问题

- 恢复使用动态访问令牌而非硬编码令牌
- 移除硬编码的JWT令牌字符串提高安全性
- 将违规原因集合类型从ArrayList改为LinkedHashSet避免重复
- 添加Set接口导入声明支持新的数据结构
- 注释掉临时测试用的固定令牌配置
fcw 2 mesiacov pred
rodič
commit
5101776775

+ 4 - 1
alien-store-platform/src/main/java/shop/alien/storeplatform/util/AiContentModerationUtil.java

@@ -13,7 +13,9 @@ import org.springframework.util.StringUtils;
 import org.springframework.web.client.RestTemplate;
 
 import java.util.ArrayList;
+import java.util.LinkedHashSet;
 import java.util.List;
+import java.util.Set;
 
 /**
  * 通用图文审核工具类
@@ -167,7 +169,8 @@ public class AiContentModerationUtil {
             }
 
             // 检查是否有任何项目被标记为违规
-            List<String> violationReasons = new ArrayList<>();
+            Set<String> violationReasons = new LinkedHashSet<>();
+//            List<String> violationReasons = new ArrayList<>();
             boolean hasViolations = false;
 
             for (int i = 0; i < results.size(); i++) {

+ 2 - 2
alien-store/src/main/java/shop/alien/store/controller/AiAuditController.java

@@ -118,8 +118,8 @@ public class AiAuditController {
         requestBody.put("text", text);
         HttpHeaders aiHeaders = new HttpHeaders();
         aiHeaders.setContentType(MediaType.APPLICATION_JSON);
-//        aiHeaders.set("Authorization", "Bearer " + accessToken);
-        aiHeaders.set("Authorization", "Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJ1cHN0b3JlQGFkbWluLmNvbSIsImlkIjo2LCJ0aW1lIjoxNzYyOTI1NDAzLjY1MTY5MjZ9.07lz8Ox2cGC28UCmqcKCt5R6Rfwtgs-Eiu0ttgWRxws");
+        aiHeaders.set("Authorization", "Bearer " + accessToken);
+//        aiHeaders.set("Authorization", "Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJ1cHN0b3JlQGFkbWluLmNvbSIsImlkIjo2LCJ0aW1lIjoxNzYyOTI1NDAzLjY1MTY5MjZ9.07lz8Ox2cGC28UCmqcKCt5R6Rfwtgs-Eiu0ttgWRxws");
 
         HttpEntity<Map<String, Object>> request = new HttpEntity<>(requestBody, aiHeaders);