The invention relates to the technical field of security
vulnerability solving, and provides a non-intrusive unauthorized security
vulnerability solving method, which comprises the following steps: S1, designing a self-defined unauthorized security
vulnerability detection tool, defining a set of
service provider interface SPI in the unauthorized security
vulnerability detection tool, and integrating with a
service system through the
service provider interface SPI to obtain an unauthorized security
vulnerability detection result; realizing permission judgment of the
service system; s2, marking a bean object of the front-end interface which needs to be subjected to permission judgment in the
service system by using a (at) Controller or (at) RestController
annotation, and meanwhile, adding user permission checking logic to a method in which tool
annotation is used in the bean object by adopting a Spring AOP technology by the unauthorized security
vulnerability detection tool, when permission judgment needs to be carried out, calling is carried out through the SPI of the
service provider interface. According to the technical scheme, a user-defined tool is adopted, a group of authority annotations are defined, and the tool automatically scans all classes and methods with the annotations in the business codes and executes authority checking.