33 lines
1.1 KiB
Python
33 lines
1.1 KiB
Python
|
#!/usr/bin/env python3
|
|||
|
|
"""组织隔离实测：切换临时用户的角色，用两个 JWT 打同一组接口。
|
|||
|
|
|
|||
|
|
- token A: users.id=7 role=2 organization_id=NULL → 总管理员，应看到全部
|
|||
|
|
- token B: users.id=7 role=1 organization_id=1 → 组织1管理员，应看不到组织B的 7777
|
|||
|
|
"""
|
|||
|
|
import time
|
|||
|
|
import pymysql
|
|||
|
|
import jwt
|
|||
|
|
|
|||
|
|
SECRET = "32e8708743c42fe764aff1d40737a63803a46815a9501f4bcb50c41fe3d27108"
|
|||
|
|
FACTS = "facts.txt"
|
|||
|
|
|
|||
|
|
|
|||
|
|
def token_for(role, org_id):
|
|||
|
|
conn = pymysql.connect(host="10.8.0.252", user="root",
|
|||
|
|
password="Hbhyg731024@", database="pms_dev")
|
|||
|
|
cur = conn.cursor()
|
|||
|
|
cur.execute("UPDATE users SET role=%s, organization_id=%s WHERE id=7", (role, org_id))
|
|||
|
|
conn.commit()
|
|||
|
|
cur.close()
|
|||
|
|
conn.close()
|
|||
|
|
now = int(time.time())
|
|||
|
|
return jwt.encode({"sub": 7, "phone": "19900000001",
|
|||
|
|
"exp": now + 86400, "iat": now}, SECRET, algorithm="HS256")
|
|||
|
|
|
|||
|
|
|
|||
|
|
if __name__ == "__main__":
|
|||
|
|
with open(FACTS, "w", encoding="utf-8") as fh:
|
|||
|
|
fh.write("SUPER=" + token_for(2, None) + "\n")
|
|||
|
|
fh.write("ORG1=" + token_for(1, 1) + "\n")
|
|||
|
|
print(open(FACTS, encoding="utf-8").read())
|