eitc-admin/src/main/java/com/eitc/web/controller/common/DownloadController.java

@@ -0,0 +1,65 @@
+package com.eitc.web.controller.common;
+
+import com.eitc.common.config.EitcConfig;
+import com.eitc.common.constant.Constants;
+import com.eitc.common.core.controller.BaseController;
+import com.eitc.common.utils.StringUtils;
+import com.eitc.common.utils.file.FileUtils;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+import org.springframework.http.MediaType;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RestController;
+
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+
+
+/**
+ * 通用请求处理
+ *
+ * @author eitc
+ */
+@RestController
+@RequestMapping("/download")
+public class DownloadController extends BaseController {
+
+    /**
+     * 硬件app
+     */
+    @GetMapping("/hardware")
+    public void hardware(HttpServletRequest request, HttpServletResponse response) throws Exception {
+        String resource = "/profile/app/huishitong.apk";
+        resourceDownload(resource, response);
+    }
+
+    @GetMapping("/hospital")
+    public void hospital(HttpServletResponse response) throws Exception {
+        String resource = "/profile/app/kouqiangyiyuan_1.0.0_1_240830_release.apk";
+        resourceDownload(resource, response);
+    }
+
+    @GetMapping("/document")
+    public void document(HttpServletResponse response) throws Exception {
+        String resource = "/profile/app/document.pdf";
+        resourceDownload(resource, response);
+    }
+
+    public void resourceDownload(String resource, HttpServletResponse response) throws Exception {
+        // 禁止目录上跳级别
+        if (StringUtils.contains(resource, "..")) {
+            throw new Exception(StringUtils.format("资源文件({})非法，不允许下载。 ", resource));
+        }
+        // 本地资源路径
+        String localPath = EitcConfig.getProfile();
+        // 数据库资源地址
+        String downloadPath = localPath + StringUtils.substringAfter(resource, Constants.RESOURCE_PREFIX);
+        // 下载名称
+        String downloadName = StringUtils.substringAfterLast(downloadPath, "/");
+        response.setContentType(MediaType.APPLICATION_OCTET_STREAM_VALUE);
+        FileUtils.setAttachmentResponseHeader(response, downloadName);
+        FileUtils.writeBytes(downloadPath, response.getOutputStream());
+    }
+
+}

eitc-framework/src/main/java/com/eitc/framework/config/SecurityConfig.java

@@ -112,6 +112,7 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter
                 .authorizeRequests()
                 // 对于登录login 注册register 验证码captchaImage 允许匿名访问
                 .antMatchers("/login", "/register", "/captchaImage","/sys/clinict/downloadLocal/**").permitAll()
+                .antMatchers("/download/**").permitAll()
                 // 静态资源，可匿名访问
                 .antMatchers(HttpMethod.GET, "/", "/*.html", "/**/*.html", "/**/*.css", "/**/*.js", "/profile/**").permitAll()
                 .antMatchers("/swagger-ui.html", "/swagger-resources/**", "/webjars/**", "/*/api-docs", "/druid/**").permitAll()