96 lines
3.2 KiB
C#
96 lines
3.2 KiB
C#
using Infrastructure;
|
||
using Infrastructure.Model;
|
||
using Microsoft.AspNetCore.Authorization;
|
||
using Microsoft.AspNetCore.Http;
|
||
using Microsoft.Extensions.Logging;
|
||
using System.Security.Claims;
|
||
using RIZO.Common;
|
||
|
||
namespace RIZO.ServiceCore.Middleware
|
||
{
|
||
/// <summary>
|
||
/// jwt认证中间件
|
||
/// </summary>
|
||
public class JwtAuthMiddleware
|
||
{
|
||
private readonly RequestDelegate _next;
|
||
private readonly ILogger<JwtAuthMiddleware> _logger;
|
||
private static readonly string[] _whitelistPaths = new[]
|
||
{
|
||
".png",
|
||
"/msgHub"
|
||
};
|
||
|
||
public JwtAuthMiddleware(RequestDelegate next, ILogger<JwtAuthMiddleware> logger)
|
||
{
|
||
_next = next;
|
||
_logger = logger;
|
||
}
|
||
|
||
public async Task InvokeAsync(HttpContext context)
|
||
{
|
||
var path = context.Request.Path.Value;
|
||
|
||
// 如果请求是带扩展名的（即包含 .）
|
||
if (path.Contains('.'))
|
||
{
|
||
await _next(context);
|
||
return;
|
||
}
|
||
if (_whitelistPaths.Any(p => path.StartsWith(p, StringComparison.OrdinalIgnoreCase)))
|
||
{
|
||
await _next(context);
|
||
return;
|
||
}
|
||
var endpoint = context.GetEndpoint();
|
||
var allowAnonymous = endpoint?.Metadata?.GetMetadata<AllowAnonymousAttribute>() != null;
|
||
|
||
if (allowAnonymous)
|
||
{
|
||
await _next(context);
|
||
return;
|
||
}
|
||
|
||
string ip = HttpContextExtension.GetClientUserIp(context);
|
||
string url = context.Request.Path;
|
||
string osType = context.Request.Headers["os"];
|
||
|
||
TokenModel loginUser = JwtUtil.GetLoginUser(context);
|
||
|
||
if (loginUser != null)
|
||
{
|
||
var now = DateTime.UtcNow;
|
||
var ts = loginUser.ExpireTime - now;
|
||
var cacheKey = $"token_{loginUser.UserId}";
|
||
|
||
if (!CacheHelper.Exists(cacheKey) && ts.TotalMinutes < 5 && ts.TotalMinutes > 0)
|
||
{
|
||
var newToken = JwtUtil.GenerateJwtToken(JwtUtil.AddClaims(loginUser));
|
||
CacheHelper.SetCache(cacheKey, cacheKey, 1);
|
||
|
||
if (!string.IsNullOrEmpty(osType))
|
||
{
|
||
context.Response.Headers.Append("Access-Control-Expose-Headers", "X-Refresh-Token");
|
||
}
|
||
|
||
context.Response.Headers.Append("X-Refresh-Token", newToken);
|
||
_logger.LogInformation($"刷新Token: {loginUser.UserName}");
|
||
}
|
||
|
||
// 还可以挂载到 context.User
|
||
var identity = new ClaimsIdentity(JwtUtil.AddClaims(loginUser), "jwt");
|
||
context.User = new ClaimsPrincipal(identity);
|
||
|
||
await _next(context);
|
||
}
|
||
else
|
||
{
|
||
string msg = $"请求访问[{url}]失败，Token无效或未登录";
|
||
_logger.LogWarning(msg);
|
||
//context.Response.StatusCode = StatusCodes.Status401Unauthorized;
|
||
await context.Response.WriteAsJsonAsync(ApiResult.Error(ResultCode.DENY, msg));
|
||
}
|
||
}
|
||
}
|
||
}
|