pay/dax-pay
1
0
Fork 0
mirror of https://gitee.com/dromara/dax-pay synced 2026-08-11 23:25:33 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix(risk): 海外IP检查 IPv6 直通放行, 修复 NetUtil.isInnerIP 对 IPv6 抛异常

Browse Source
This commit is contained in:
daxpay
2026-08-04 16:40:54 +08:00
parent 6d5ce9dfd1
commit e35bc726a0
2 changed files with 23 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
daxpay-plugin/daxpay-plugin-risk/src/main/java/cn/daxpay/open/plugin/risk/strategy/DefaultPayRiskChecker.java
View File

@@ -12,6 +12,7 @@ import cn.daxpay.open.plugin.risk.enums.PayBlacklistTypeEnum;
import cn.daxpay.open.plugin.risk.enums.PayRiskHitPhaseEnum;
import cn.daxpay.open.plugin.risk.service.PayBlacklistService;
import cn.daxpay.open.plugin.risk.service.PayRiskHitService;
import cn.hutool.core.lang.Validator;
import cn.hutool.core.net.NetUtil;
import cn.hutool.core.util.StrUtil;
import com.github.benmanes.caffeine.cache.Cache;
@@ -150,6 +151,10 @@ public class DefaultPayRiskChecker implements PayRiskChecker {
if (StrUtil.isBlank(ip)) {
return;
}
// IPv6 暂不参与网段判定, 直接放行(NetUtil.isInnerIP 仅支持 IPv4, 传入 IPv6 会抛异常)
if (Validator.isIpv6(ip)) {
return;
}
// 内网/回环地址直通放行(网络层判定, 不查库)
if (NetUtil.isInnerIP(ip)) {
return;

18
daxpay-plugin/daxpay-plugin-risk/src/test/java/cn/daxpay/open/plugin/risk/strategy/DefaultPayRiskCheckerTest.java
View File

@@ -128,6 +128,24 @@ class DefaultPayRiskCheckerTest {
verifyNoInteractions(payRiskHitService);
}
@Test
@DisplayName("海外检查: IPv6 回环直通放行(NetUtil.isInnerIP 仅支持 IPv4, 传入 IPv6 会抛异常)")
void overseasIp_ipv6Loopback_shouldPassThroughWithoutLookup() {
assertDoesNotThrow(() -> checker.checkBeforePay(overseasCtx("::1")));
verify(ipToRegionService, never()).getRegionByIp(anyString());
verifyNoInteractions(payRiskHitService);
}
@Test
@DisplayName("海外检查: IPv6 公网地址直通放行")
void overseasIp_ipv6Public_shouldPassThroughWithoutLookup() {
assertDoesNotThrow(() -> checker.checkBeforePay(overseasCtx("2409:8a20:210:0:0:0:0:1")));
verify(ipToRegionService, never()).getRegionByIp(anyString());
verifyNoInteractions(payRiskHitService);
}
@Test
@DisplayName("海外检查: xdb 查询失败(region=null)放行不记录")
void overseasIp_lookupReturnsNull_shouldPass() {