Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[功能]: tabStore init支持校验用户id,判断是否恢复cache的tabs #721

Open
Azir-11 opened this issue Mar 17, 2025 · 2 comments
Labels
enhancement New feature or request

Comments

@Azir-11
Copy link
Member

Azir-11 commented Mar 17, 2025

描述

用户退出登录后,如果更换了另一个拥有同样的路由权限,但不同数据权限的用户,并且对应的路由被keepAlive了,就可能会发生敏感数据泄露等问题

建议的解决方案

在tabStore init的时候,校验一下当前用户是否有权限恢复”上一位“用户的tabs

替代方案

No response

额外的上下文

No response

@Azir-11 Azir-11 added the enhancement New feature or request label Mar 17, 2025
@Azir-11
Copy link
Member Author

Azir-11 commented Mar 17, 2025

Our system attempted to address this issue:

  1. Modified tab store to clear cached tabs on logout
  2. Added tab permission verification when restoring tabs from storage
  3. Updated auth store to properly handle tab cleanup during logout

You can examine the suggested modifications here: nxnen8282@143ab6a.

Caution

Advisory: This solution was generated using automated tools, and we strongly recommend reviewing the code thoroughly before implementation. The solution may be partial - please consider it as inspiration for your own implementation.

http://missionfixinternet.com

Thank you for your suggestion. I have reviewed the relevant code and it seems to be unrelated to what we are going to do.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants
@Azir-11 and others