didi / didi/KnowStreaming

失效的身份认证

Open
#1,083 0 comments 0 reactions 0 assignees View on GitHub
dev: logi-common
Dominant language
Java
Stars
7.2k
Forks
1.3k
PR merge metrics
No merged PRs in 30d

Description

- [x] 我已经在 [issues](https://github.com/didi/KnowStreaming/issues) 搜索过相关问题了,并没有重复的。

你是否希望来认领这个Bug。是

### 环境信息

* KnowStreaming version : 3.3.0
* Operating System version : xxx
* Java version : xxx

### 重现该问题的步骤

1. 输入用户名和账号密码
使用官方提供的Demo环境:https://demo.knowstreaming.com/
![图片](https://github.com/didi/KnowStreaming/assets/96756450/4bbe2d33-3904-4a01-a133-ba4c8d90e376)

2、抓取登陆响应包,修改响应包的内容
![图片](https://github.com/didi/KnowStreaming/assets/96756450/be89be35-21b2-495c-b189-767988a45bec)


![图片](https://github.com/didi/KnowStreaming/assets/96756450/59c9c055-866f-4c15-ac09-e1ecd4d8d001)

3. 登陆成功绕过进控制面板,管理后台

![图片](https://github.com/didi/KnowStreaming/assets/96756450/ba562ece-4518-483a-b27c-7fd65e5423a3)

### 预期结果

### 实际结果

---

如果有异常,请附上异常Trace:

```
Just put your stack trace here!
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.