From e1929aa4c5e4bde1db50fc9eb0552f2272cb32cd Mon Sep 17 00:00:00 2001
From: houzhongjian <houzhongyi@126.com>
Date: 星期三, 24 七月 2024 15:25:54 +0800
Subject: [PATCH] 1、请求租户不存在时，记录访问日志、操作日志异常的问题 2、LoginUser 新增过期时间，方便判断 token 过期 3、增加 ConfigApi，支持参数配置的读取
---
iailab-cloud/iailab-gateway/src/main/java/com/iailab/gateway/filter/security/TokenAuthenticationFilter.java | 5 ++---
1 files changed, 2 insertions(+), 3 deletions(-)
diff --git a/iailab-cloud/iailab-gateway/src/main/java/com/iailab/gateway/filter/security/TokenAuthenticationFilter.java b/iailab-cloud/iailab-gateway/src/main/java/com/iailab/gateway/filter/security/TokenAuthenticationFilter.java
index 499145f..a144b2c 100644
--- a/iailab-cloud/iailab-gateway/src/main/java/com/iailab/gateway/filter/security/TokenAuthenticationFilter.java
+++ b/iailab-cloud/iailab-gateway/src/main/java/com/iailab/gateway/filter/security/TokenAuthenticationFilter.java
@@ -33,7 +33,7 @@
* 1. 验证通过时，将 userId、userType、tenantId 通过 Header 转发给服务
* 2. 验证不通过，还是会转发给服务。因为，接口是否需要登录的校验，还是交给服务自身处理
*
- * @author iailab
+ * @author 芋道源码
*/
@Component
public class TokenAuthenticationFilter implements GlobalFilter, Ordered {
@@ -96,7 +96,7 @@
return getLoginUser(exchange, token).defaultIfEmpty(LOGIN_USER_EMPTY).flatMap(user -> {
// 1. 无用户，直接 filter 继续请求
if (user == LOGIN_USER_EMPTY || // 下面 expiresTime 的判断，为了解决 token 实际已经过期的情况
- user.getExpiresTime() == null || LocalDateTimeUtils.afterNow(user.getExpiresTime())) {
+ user.getExpiresTime() == null || LocalDateTimeUtils.beforeNow(user.getExpiresTime())) {
return chain.filter(exchange);
}
@@ -163,5 +163,4 @@
public int getOrder() {
return -100; // 和 Spring Security Filter 的顺序对齐
}
-
}
--
Gitblit v1.9.3