yml2213
cdee93c7c5
根因：access_token每2小时过期，前端收到401直接清token跳登录，没有用refresh_token续期 后端修复： - adminauth模块新增 POST /admin/auth/refresh 接口 - Service 注入 JWTManager，支持 admin refresh token 换新 token pair - Refresh 方法验证 subjectType=admin + tokenType=refresh 前端修复： - 401 拦截器核心改造：收到401先调 refresh 接口续期 - 加 isRefreshing 锁 + pendingRequests 队列防止并发刷新 - refresh 用原生 axios.post 避免拦截器递归 - 成功则更新 localStorage + 重试原请求，失败才清 token 跳登录 - 排除 /auth/refresh 自身避免死循环 - 支持 /admin/ 请求独立 token 管理 - auth.ts/adminAuth.ts 新增手动 refreshUserToken/refreshAdminSession - 路由守卫给所有需登录路由添加 meta.requiresAuth - 守卫同时支持 PC 端 /login 和移动端 /m/login
63 lines
1.6 KiB
Go
63 lines
1.6 KiB
Go
package adminauth
|
|
|
|
import (
|
|
"errors"
|
|
|
|
"hfb_sys/backend/internal/modules/auth"
|
|
)
|
|
|
|
var (
|
|
ErrDependencyUnavailable = errors.New("dependency unavailable")
|
|
ErrInvalidCredential = errors.New("invalid credential")
|
|
ErrCaptchaInvalid = errors.New("captcha invalid")
|
|
ErrAdminDisabled = errors.New("admin disabled")
|
|
ErrInvalidRefreshToken = errors.New("invalid refresh token")
|
|
)
|
|
|
|
type Service struct {
|
|
repo *Repository
|
|
jwt *auth.JWTManager
|
|
}
|
|
func NewService(repo *Repository, jwt *auth.JWTManager) *Service {
|
|
return &Service{repo: repo, jwt: jwt}
|
|
}
|
|
|
|
func (s *Service) Refresh(refreshToken string) (*auth.TokenPair, error) {
|
|
if s.jwt == nil {
|
|
return nil, ErrDependencyUnavailable
|
|
}
|
|
claims, err := s.jwt.ParseSubject(refreshToken, "refresh", "admin")
|
|
if err != nil {
|
|
return nil, ErrInvalidRefreshToken
|
|
}
|
|
pair, err := s.jwt.GenerateSubjectPair(claims.UserID, claims.Phone, "admin")
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
return &pair, nil
|
|
}
|
|
|
|
func (s *Service) Captcha() (*CaptchaDTO, error) {
|
|
if s.repo == nil {
|
|
return nil, ErrDependencyUnavailable
|
|
}
|
|
return s.repo.Captcha()
|
|
}
|
|
|
|
func (s *Service) Login(username string, password string, captchaID string, captchaCode string) (LoginResult, error) {
|
|
if s.repo == nil {
|
|
return LoginResult{}, ErrDependencyUnavailable
|
|
}
|
|
if username == "" || password == "" || captchaID == "" || captchaCode == "" {
|
|
return LoginResult{}, ErrInvalidCredential
|
|
}
|
|
return s.repo.Login(username, password, captchaID, captchaCode)
|
|
}
|
|
|
|
func (s *Service) Me(adminID uint64) (*AdminDTO, error) {
|
|
if s.repo == nil {
|
|
return nil, ErrDependencyUnavailable
|
|
}
|
|
return s.repo.FindByID(adminID)
|
|
}
|