in shardingsphere-ui-backend/src/main/java/org/apache/shardingsphere/ui/security/AuthenticationFilter.java [54:67]
public void doFilter(final ServletRequest servletRequest, final ServletResponse servletResponse, final FilterChain filterChain) throws IOException, ServletException {
HttpServletRequest httpRequest = (HttpServletRequest) servletRequest;
HttpServletResponse httpResponse = (HttpServletResponse) servletResponse;
if (LOGIN_URI.equals(httpRequest.getRequestURI())) {
handleLogin(httpRequest, httpResponse);
} else {
String accessToken = httpRequest.getHeader("Access-Token");
if (!Strings.isNullOrEmpty(accessToken) && accessToken.equals(userAuthenticationService.getToken())) {
filterChain.doFilter(httpRequest, httpResponse);
} else {
respondWithUnauthorized(httpResponse);
}
}
}