Explorar o código

fix: 删除 C 端全量用户列表接口,杜绝 PII 泄露

- GET /user/listUser 无任何权限/归属过滤,任意登录的 C 端用户
  可枚举全量用户(含手机号、头像、昵称),且前端无任何调用方
  (管理端用的是 /custom/listUser),属调试遗留接口,直接删除

Co-Authored-By: Claude <noreply@anthropic.com>
skyline hai 3 semanas
pai
achega
9f268792a0

+ 0 - 12
car-wash-miniapp/src/main/java/com/kym/miniapp/controller/UserController.java

@@ -68,18 +68,6 @@ public class UserController {
         return R.success(userService.getMe());
     }
 
-    /**
-     * 用户列表
-     *
-     * @param pageNum
-     * @param pageSize
-     * @return
-     */
-    @GetMapping("listUser")
-    PageBean<UserVo> listUser(@RequestParam int pageNum, @RequestParam int pageSize) {
-        return userService.listUserVo(pageNum, pageSize);
-    }
-
     /**
      * 更新用户信息
      *

+ 0 - 1
car-wash-service/src/main/java/com/kym/service/UserService.java

@@ -26,7 +26,6 @@ public interface UserService extends MPJBaseService<User> {
 
     void updateUser(UserVo userVo);
 
-    PageBean<UserVo> listUserVo(Integer pageNum, Integer pageSize);
 
     R<?> wxLogin(WxLoginParams params);
 

+ 0 - 11
car-wash-service/src/main/java/com/kym/service/impl/UserServiceImpl.java

@@ -261,17 +261,6 @@ public class UserServiceImpl extends MPJBaseServiceImpl<UserMapper, User> implem
         }
     }
 
-    @Override
-    public PageBean<UserVo> listUserVo(Integer pageNum, Integer pageSize) {
-        PageHelper.startPage(pageNum, pageSize);
-        var userVoList = list().stream().map(user -> {
-            var userVo = new UserVo();
-            BeanUtils.copyProperties(user, userVo);
-            return userVo;
-        }).collect(Collectors.toList());
-        return new PageBean<>(userVoList);
-    }
-
 
     /**
      * 分页查询用户列表