From 9748d266609d32c1b5b7efab2930a35af045ad0a Mon Sep 17 00:00:00 2001 From: wangyu <727842003@qq.com> Date: Mon, 11 Jan 2021 15:51:11 +0800 Subject: [PATCH] =?UTF-8?q?fix:=20=E4=B8=8D=E4=BD=BF=E7=94=A8cookie?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../configuration/jwt/TokenProvider.java | 15 +++++++-------- 1 file changed, 7 insertions(+), 8 deletions(-) diff --git a/flyfish-web/src/main/java/com/flyfish/framework/configuration/jwt/TokenProvider.java b/flyfish-web/src/main/java/com/flyfish/framework/configuration/jwt/TokenProvider.java index 5aafec2..7cc6185 100644 --- a/flyfish-web/src/main/java/com/flyfish/framework/configuration/jwt/TokenProvider.java +++ b/flyfish-web/src/main/java/com/flyfish/framework/configuration/jwt/TokenProvider.java @@ -1,7 +1,6 @@ package com.flyfish.framework.configuration.jwt; import com.flyfish.framework.domain.base.IUser; -import com.flyfish.framework.enums.UserType; import com.flyfish.framework.utils.RedisOperations; import io.jsonwebtoken.*; import io.jsonwebtoken.io.Decoders; @@ -23,7 +22,10 @@ import org.springframework.web.server.ServerWebExchange; import javax.annotation.Resource; import java.security.Key; -import java.util.*; +import java.util.Arrays; +import java.util.Collection; +import java.util.Date; +import java.util.Optional; import java.util.stream.Collectors; /** @@ -36,7 +38,6 @@ public class TokenProvider implements InitializingBean { public static final String AUTHORIZATION_HEADER = "Authorization"; private static final String AUTHORITIES_KEY = "auth"; - private static List TOKEN_USER_TYPES = Arrays.asList(UserType.USER, UserType.VIP); private final String base64Secret; private final long tokenValidityInMilliseconds; private final long tokenValidityInMillisecondsForRememberMe; @@ -85,12 +86,10 @@ public class TokenProvider implements InitializingBean { String token = createToken(authentication, true); HttpHeaders headers = exchange.getResponse().getHeaders(); // app用户从头部返回，方便获取 - if (TOKEN_USER_TYPES.contains(user.getUserType())) { - headers.add("Token", token); - } + headers.add("Token", token); // token在web端的时间较短，不允许记住，所以使用短期 - exchange.getResponse().addCookie(ResponseCookie.from(AUTHORIZATION_HEADER, "Bearer-" + token). - httpOnly(true).maxAge(tokenValidityInMilliseconds).build()); +// exchange.getResponse().addCookie(ResponseCookie.from(AUTHORIZATION_HEADER, "Bearer-" + token). +// httpOnly(true).maxAge(tokenValidityInMilliseconds).build()); // redis存储时间长 redisOperations.set(token, true, tokenValidityInMillisecondsForRememberMe); }