odata接口

srv/src/main/java/customer/lianchuangjie/common/filter/OperateAuthFilter.java

@@ -112,10 +112,10 @@ public class OperateAuthFilter implements Filter {
                 }
             }
         }
-        //处理ODATA接口 只有odata接口需要从cookies中读取参数
-        if (Pattern.matches("(.*/odata/v4/.*)", uri)) {
+        //处理ODATA接口 OData接口仅允许本机访问 只有odata接口需要从cookies中读取参数
+        if (Pattern.matches("(.*/odata/v4/.*)", uri) && !"127.0.0.1".equals(ip) && !"0:0:0:0:0:0:0:1".equals(ip)) {
             if (cookies == null || cookies.length == 0) {
-                Result<Object> wrapResult = Result.error("odata请求 cookies 不能为空！");
+                Result<Object> wrapResult = Result.error("requestIP=" + ip + " requestURI=" + uri + " odata请求 cookies 不能为空！");
                 writeResult(response, wrapResult);
                 return;
             }