Docs & Rules

hs-web/hsweb-frameworkGitHubLast refreshed Oct 2, 2026

This is a public, read-only report. Striff reads this repository's docs, turns each sentence that makes a claim about the code into a rule, and checks the rule against the code on the default branch. How this works

1 name in these docs no longer matches the code.

5.0.x5e471aclisted 21h ago

Is this yours? Install to manage it

Once installed, Striff checks every pull request.

1 stale

21 docs, listed Oct 2

hs-web/hsweb-frameworkOpen repository

Names these docs write that the code no longer has1

Each sentence below names a type the default branch doesn't declare, or declares somewhere else. Edit the doc so it matches the code, or bring the type back.

GoneRequiresDataAccess
注解名称 [ @RequiresDataAccess ](src/main/java/org/hswebframework/web/authorization/annotation/RequiresDataAccess.java), 说明数据权限控制
The repository once held hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/annotation/RequiresDataAccess.java. It doesn't now. Closest names there: DataAccess, DataAccessType.
View on GitHub

hs-web/hsweb-framework — documented rules

12 of 12 rules, printed October 3, 2026.

	The sentence in your docs
Read Oct 2	响应式请求先由 `ReactiveUserTokenParser` 提取 `ParsedToken`，再由 `UserTokenWebFilter` 写入 Reactor Context。`UserTokenReactiveAuthenticationSupplier` 读取该上下文并通过 `UserTokenManager` 校验有状态用户令牌，最后加载 `Authentication`。	ReactiveUserTokenParser depends on ParsedToken	Holds
Read Oct 2	响应式请求先由 `ReactiveUserTokenParser` 提取 `ParsedToken`，再由 `UserTokenWebFilter` 写入 Reactor Context。`UserTokenReactiveAuthenticationSupplier` 读取该上下文并通过 `UserTokenManager` 校验有状态用户令牌，最后加载 `Authentication`。	UserTokenReactiveAuthenticationSupplier depends on UserTokenManager	Holds
Read Oct 2	响应式请求先由 `ReactiveUserTokenParser` 提取 `ParsedToken`，再由 `UserTokenWebFilter` 写入 Reactor Context。`UserTokenReactiveAuthenticationSupplier` 读取该上下文并通过 `UserTokenManager` 校验有状态用户令牌，最后加载 `Authentication`。	UserTokenReactiveAuthenticationSupplier depends on Authentication	Holds
Read Oct 2	新增的 `ReactiveTokenAuthenticationProvider` 用于按 `ParsedToken.type` 接管原始令牌的响应式认证，例如结构化 API Token、个人令牌或其他无状态令牌。Provider 负责完整验证令牌并返回最终 `Authentication`，不创建 hsweb 用户令牌记录。	ReactiveTokenAuthenticationProvider depends on ParsedToken	Holds
Read Oct 2	新增的 `ReactiveTokenAuthenticationProvider` 用于按 `ParsedToken.type` 接管原始令牌的响应式认证，例如结构化 API Token、个人令牌或其他无状态令牌。Provider 负责完整验证令牌并返回最终 `Authentication`，不创建 hsweb 用户令牌记录。	ReactiveTokenAuthenticationProvider depends on Authentication	Holds
Read Oct 2	`ReactiveTokenAuthenticationProvider#getTokenType()` 返回稳定、非空、大小写敏感的唯一路由键。初始化时空类型或重复类型立即失败，不能依赖 Bean 注册顺序覆盖。	ReactiveTokenAuthenticationProvider has a `getTokenType` method	Holds
Read Oct 2	统一结构化 Token Parser 应保持无阻塞、无数据库访问，只负责提取和低成本分类。未命中保留前缀时返回空；命中保留前缀后，即使令牌非法也必须归属对应 Provider，不能回退普通 Bearer 或有状态 Token。`UserTokenWebFilter` 继续保留原有 `ReactiveLogger` 请求上下文。	UserTokenWebFilter depends on ReactiveLogger	Holds
Read Oct 2	`ThirdPartReactiveAuthenticationManager` 保持已发布的 `getByUserId` 职责，并通过 JavaDoc 与原始令牌认证 Provider 明确分工。	ThirdPartReactiveAuthenticationManager has `getByUserId`	Holds
Read Oct 2	使用`hsweb-authorization-api`提供的监听器,类`UserOnSignIn`监听用户授权事件`AuthorizationSuccessEvent` 当用户完成授权(授权方式可自行实现或者使用框架默认的授权方式,主要触发该事件即可).授权通过后会触发该事件.流程如下	UserOnSignIn depends on AuthorizationSuccessEvent	Holds
Read Oct 2	与授权同理,类`UserOnSignOut`监听`AuthorizationExitEvent` ,当触发事件后,调用`UserTokenManager`移除当前登录的token信息	UserOnSignOut depends on AuthorizationExitEvent	Holds
Read Oct 2	与授权同理,类`UserOnSignOut`监听`AuthorizationExitEvent` ,当触发事件后,调用`UserTokenManager`移除当前登录的token信息	UserOnSignOut depends on UserTokenManager	Holds
Read Oct 2	``AccessLoggerListener接口并注入到spring容器, 当有日志产生时,会调用接口方法`onLogger`,并传入日志信息	AccessLoggerListener has `onLogger`	Holds

12 rules from 3 docs

See these where the change is. The browser extension puts a pull request's doc findings, and a diagram of what it changed, on the GitHub page itself, so the code and what your docs say about it are side by side.