2a20f7a89fa9b2662979494ccdcd9941ae0bdf3d
TenantSecurityWebFilter 继承 ApiRequestFilter,之前 shouldNotFilter 仅匹配 /admin-api 和 /app-api,导致 /open-api 请求跳过租户校验,DB 层 getRequiredTenantId() 抛 NPE。现在补上 openApi prefix,外部系统需传 tenant-id Header。 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Description
Languages
Java
79.7%
PLpgSQL
13.1%
TSQL
6.9%
Python
0.2%