移除headers中的Refresh-Token,添加Is-Refresh-Token
This commit is contained in:
@@ -53,17 +53,17 @@ public class AuthGlobalFilter implements Filter, Ordered {
|
|||||||
filterChain.doFilter(req, res);
|
filterChain.doFilter(req, res);
|
||||||
} else {
|
} else {
|
||||||
String accessTokenStr = req.getHeader(SecurityConstants.AUTHORIZATION_KEY);
|
String accessTokenStr = req.getHeader(SecurityConstants.AUTHORIZATION_KEY);
|
||||||
String refreshToken = req.getHeader(SecurityConstants.REFRESH_TOKEN_KEY);
|
String isRefreshToken = req.getHeader(SecurityConstants.IS_REFRESH_TOKEN);
|
||||||
if (StrUtil.isBlank(accessTokenStr) || !accessTokenStr.startsWith(SecurityConstants.AUTHORIZATION_PREFIX) || StrUtil.isBlank(refreshToken)) {
|
if (StrUtil.isBlank(accessTokenStr) || !accessTokenStr.startsWith(SecurityConstants.AUTHORIZATION_PREFIX)) {
|
||||||
res.getWriter().write("{\"code\": 4001, \"message\":\"" + SystemValidMessage.TOKEN_VALID_ERROR + "\"}"); //前端重定向到登录页面
|
res.getWriter().write("{\"code\": 4001, \"message\":\"" + SystemValidMessage.TOKEN_VALID_ERROR + "\"}"); //前端重定向到登录页面
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
String accessToken = accessTokenStr.substring(SecurityConstants.AUTHORIZATION_PREFIX.length());
|
String accessToken = accessTokenStr.substring(SecurityConstants.AUTHORIZATION_PREFIX.length());
|
||||||
try {
|
try {
|
||||||
if (StrUtil.isBlank(accessToken) || !JwtUtil.verifyToken(accessToken) || !JwtUtil.verifyToken(refreshToken)) {
|
if (StrUtil.isBlank(accessToken) || !JwtUtil.verifyToken(accessToken)) {
|
||||||
res.getWriter().write("{\"code\": 4001, \"message\":\"" + SystemValidMessage.TOKEN_VALID_ERROR + "\"}"); //前端重定向到登录页面
|
res.getWriter().write("{\"code\": 4001, \"message\":\"" + SystemValidMessage.TOKEN_VALID_ERROR + "\"}"); //前端重定向到登录页面
|
||||||
} else if (JwtUtil.isExpired(accessToken)) {
|
} else if (JwtUtil.isExpired(accessToken)) {
|
||||||
if (JwtUtil.isExpired(refreshToken)) {
|
if ("true".equals(isRefreshToken)) {
|
||||||
res.getWriter().write("{\"code\": 4001, \"message\":\"" + SystemValidMessage.TOKEN_EXPIRED + "\"}"); //前端重定向到登录页面
|
res.getWriter().write("{\"code\": 4001, \"message\":\"" + SystemValidMessage.TOKEN_EXPIRED + "\"}"); //前端重定向到登录页面
|
||||||
} else {
|
} else {
|
||||||
res.getWriter().write("{\"code\": 401, \"message\":\"" + SystemValidMessage.TOKEN_EXPIRED + "\"}"); //前端发起refreshToken请求
|
res.getWriter().write("{\"code\": 401, \"message\":\"" + SystemValidMessage.TOKEN_EXPIRED + "\"}"); //前端发起refreshToken请求
|
||||||
|
|||||||
Reference in New Issue
Block a user