From 506ed3d27e5d88287df50e375c6e877109834ff5 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E4=B8=8D=E5=BF=98=E5=88=9D=E5=BF=83?=
 <huazhipeng@vip.qq.com>
Date: Thu, 11 Jul 2024 16:58:42 +0800
Subject: [PATCH] =?UTF-8?q?=E6=96=B0=E5=A2=9E=E5=90=8E=E5=8F=B0IP=E5=8F=98?=
 =?UTF-8?q?=E5=8A=A8=E6=8E=A7=E5=88=B6=E5=BC=80=E5=85=B3?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 server/app/adminapi/http/middleware/AuthMiddleware.php | 7 +++++--
 server/config/project.php                              | 2 ++
 2 files changed, 7 insertions(+), 2 deletions(-)

diff --git a/server/app/adminapi/http/middleware/AuthMiddleware.php b/server/app/adminapi/http/middleware/AuthMiddleware.php
index 2808a1026..5a06051f2 100644
--- a/server/app/adminapi/http/middleware/AuthMiddleware.php
+++ b/server/app/adminapi/http/middleware/AuthMiddleware.php
@@ -18,7 +18,8 @@ namespace app\adminapi\http\middleware;
 
 use app\common\{
     cache\AdminAuthCache,
-    service\JsonService
+    service\JsonService,
+    service\ConfigService
 };
 use think\helper\Str;
 
@@ -44,7 +45,9 @@ class AuthMiddleware
             return $next($request);
         }
 
-        if ($request->adminInfo['login_ip'] != request()->ip()) {
+        //判断管理员IP是否变动
+        $loginip_check = ConfigService::get('admin_login', 'loginip_check');
+        if ($loginip_check && $request->adminInfo['login_ip'] != request()->ip()) {
             return JsonService::fail('ip地址发生变化，请重新登录', [], -1);
         }
 
diff --git a/server/config/project.php b/server/config/project.php
index 8e6d8cffa..45773a732 100644
--- a/server/config/project.php
+++ b/server/config/project.php
@@ -26,6 +26,8 @@ return [
         'password_error_times' => 5,
         // 限制禁止多少分钟不能登录
         'limit_login_time' => 30,
+        //是否开启IP变动检测
+        'loginip_check' => true,
     ],
 
     // 唯一标识，密码盐、路径加密等
-- 
Gitee