38 lines
1.3 KiB
Go
38 lines
1.3 KiB
Go
|
package handler
|
||
|
|
|
||
|
|
import (
|
||
|
|
"net/http"
|
||
|
|
"strings"
|
||
|
|
"time"
|
||
|
|
|
||
|
|
tokenx "bj_power_mes/common/token"
|
||
|
|
"bj_power_mes/internal/svc"
|
||
|
|
|
||
|
|
"github.com/zeromicro/go-zero/rest"
|
||
|
|
)
|
||
|
|
|
||
|
|
// RenewalMiddleware 滑动续签中间件（对齐 WMS 的 X-Renewed-Token 模式）：
|
||
|
|
// 每个携带有效 Bearer token 的请求都重签一个同负载的新 token，
|
||
|
|
// 会话有效期 = 距最后一次请求 sessionExpire 秒（默认 1 小时），闲置超时由 jwtAuth 返回 401。
|
||
|
|
// 无 Bearer 头（内部 X-API-TOKEN、登录接口、静态资源）直接放行不做任何处理。
|
||
|
|
func RenewalMiddleware(svcCtx *svc.ServiceContext) rest.Middleware {
|
||
|
|
return func(next http.HandlerFunc) http.HandlerFunc {
|
||
|
|
return func(w http.ResponseWriter, r *http.Request) {
|
||
|
|
authHeader := r.Header.Get("Authorization")
|
||
|
|
if strings.HasPrefix(authHeader, "Bearer ") {
|
||
|
|
tokenStr := strings.TrimPrefix(authHeader, "Bearer ")
|
||
|
|
if claims, err := tokenx.Parse(svcCtx.Config.Auth.AccessSecret, tokenStr); err == nil && time.Until(claims.ExpiresAt.Time) > 0 {
|
||
|
|
expire := svcCtx.Config.Auth.AccessExpire
|
||
|
|
if expire <= 0 {
|
||
|
|
expire = 3600
|
||
|
|
}
|
||
|
|
if newToken, err := tokenx.Issue(svcCtx.Config.Auth.AccessSecret, time.Duration(expire)*time.Second, *claims); err == nil {
|
||
|
|
w.Header().Set("X-Renewed-Token", newToken)
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
next(w, r)
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|