Install any skill in seconds. Free to start, no credit card required.
Get Started Free →lishuangqiang/xunzhi-auth-user
AI-Meeting 鉴权与用户上下文 Skill。用于处理登录态、token、`@CurrentUser`、当前用户解析、管理员判断、WebSocket 鉴权和按用户维度的数据隔离;当需求涉及 `/api/xunzhi/v1/users/**`、Sa-Token、会话归属或 WebSocket token 解析时使用。
Passed 21 of 22 test cases with the skill, and 6 of 22 without it.
and 15 more in the full report
15 fixed6 passed either way1 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 15 test cases the skill fixed. Same model, same prompt, with and without the skill.
按文档阅读顺序,在处理会话归属和数据隔离问题时,应该引入哪一份参考文档?
| Checked | Without skill | With skill |
|---|---|---|
| States that references/data-isolation.md is consulted when session ownership and data isolation are involved | Missed | Passed |
The instructions your model reads when the skill loads.
references/object-dictionary.md,确认身份对象和服务对象的真相源。references/current-user.md,确认当前用户是如何注入控制器的。references/login-and-permission.md,确认登录接口和管理员判断语义。references/websocket-auth.md。references/data-isolation.md。admin/src/main/java/com/hewei/hzyjy/xunzhi/auth/infrastructure/web/CurrentUserArgumentResolver.javaadmin/src/main/java/com/hewei/hzyjy/xunzhi/auth/infrastructure/satoken/SaTokenCurrentUserService.javaadmin/src/main/java/com/hewei/hzyjy/xunzhi/auth/infrastructure/satoken/SaTokenLoginSessionService.javaadmin/src/main/java/com/hewei/hzyjy/xunzhi/auth/infrastructure/websocket/SaTokenWebSocketAuthService.javaadmin/src/main/java/com/hewei/hzyjy/xunzhi/auth/infrastructure/satoken/SaTokenPermissionService.javaadmin/src/main/java/com/hewei/hzyjy/xunzhi/user/api/UserController.javauserId 是归属校验主键,username 只是身份展示和登录标识。@CurrentUser 的支持类型是明确受限的,不能随意扩展调用姿势。userId 一致性。isAdmin 判断依赖权限服务,不能用前端传参替代。references/object-dictionary.mdreferences/current-user.mdreferences/login-and-permission.mdreferences/websocket-auth.mdreferences/data-isolation.mdtest cases passed, vs 6 / 22 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.