From c326372b71da84c449b6097af5e281cd6fb46e2c Mon Sep 17 00:00:00 2001
From: xiaoyong931011 <15274802129@163.com>
Date: Mon, 08 Jun 2020 15:41:35 +0800
Subject: [PATCH] 20200608 代码提交
---
src/main/java/com/xcong/excoin/configurations/security/TokenFilter.java | 12 ++++++++++--
1 files changed, 10 insertions(+), 2 deletions(-)
diff --git a/src/main/java/com/xcong/excoin/configurations/security/TokenFilter.java b/src/main/java/com/xcong/excoin/configurations/security/TokenFilter.java
index 6ebf4d8..8e6192d 100644
--- a/src/main/java/com/xcong/excoin/configurations/security/TokenFilter.java
+++ b/src/main/java/com/xcong/excoin/configurations/security/TokenFilter.java
@@ -42,8 +42,10 @@
public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain) throws IOException, ServletException {
HttpServletRequest request = (HttpServletRequest) servletRequest;
String token = resolveToken(request);
+ log.info("token--->{}", token);
if (StrUtil.isNotBlank(token)) {
String loginStr = (String) redisUtils.get(AppContants.APP_LOGIN_PREFIX + token);
+ log.info("login user --> {}", loginStr);
if (StrUtil.isNotBlank(loginStr)) {
LoginUserBean loginUser = JSONObject.parseObject(loginStr, LoginUserBean.class);
Authentication authentication = new UsernamePasswordAuthenticationToken(loginUser.getMemberEntity(), token, new ArrayList<>());
@@ -67,13 +69,19 @@
*/
private String resolveToken(HttpServletRequest request) {
try {
- String bearerToken = request.getHeader(AppContants.TOKEN_HEADER);
+ // TODO debug模式下写死用户
+ String bearerToken = "";
+ if (applicationProperties.isDebug()) {
+ bearerToken = "Bearer JSEre1ZUKEu2Ga5ORM+juxXv6yBwmt+FgLhxaeHf1EEJfIb3oRir4pXqe5JDhS6sXfLYOXRIAyBpq+SYBwAtGigxwzGVPn+k4Pt6vNxZ4h8Pk4IeG4+FqbFD0guzvu3WN2eRnnzYqCepl429v9Ju7n4jSG0Hj5ViM3MHQZs3qHo=";
+ } else {
+ bearerToken = request.getHeader(AppContants.TOKEN_HEADER);
+ }
+ log.info("bearerToken --->{}", bearerToken);
if (StringUtils.hasText(bearerToken) && bearerToken.startsWith(AppContants.TOKEN_START_WITH)) {
// 去掉令牌前缀
String rsaToken = bearerToken.replace(AppContants.TOKEN_START_WITH, "");
RSA rsa = new RSA(securityProperties.getPrivateKey(), null);
String[] tokens = StrUtil.split(rsa.decryptStr(rsaToken, KeyType.PrivateKey), "_");
-
if (verifyTokenExpired(Long.parseLong(tokens[1]))) {
return tokens[0];
}
--
Gitblit v1.9.1