wgh/coreshoppro
1
0
Fork 0
mirror of http://git.coreshop.cn/jianweie/coreshoppro.git synced 2026-03-24 18:17:22 +08:00
Code Issues Packages Projects Releases Wiki Activity

【修复】修复万能表单前端传输token验证是否登录解密失败的问题。

Browse Source
This commit is contained in:
jianweie code
2024-05-29 00:43:48 +08:00
parent 7a081306c9
commit d1faa60db3
1 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
CoreCms.Net.Auth/TokenHelper.cs
View File

@@ -17,6 +17,7 @@ using System.Text;
using System.Threading.Tasks; using System.Threading.Tasks;
using CoreCms.Net.Configuration; using CoreCms.Net.Configuration;
using Microsoft.IdentityModel.Tokens; using Microsoft.IdentityModel.Tokens;
using NETCore.Encrypt;
namespace CoreCms.Net.Auth namespace CoreCms.Net.Auth
{ {
@@ -92,10 +93,13 @@ namespace CoreCms.Net.Auth
var issuer = AppSettingsConstVars.JwtConfigIssuer; var issuer = AppSettingsConstVars.JwtConfigIssuer;
var audience = AppSettingsConstVars.JwtConfigAudience; var audience = AppSettingsConstVars.JwtConfigAudience;
try try
{ {
var aesDecryptToken = EncryptProvider.AESDecrypt(token, AppSettingsConstVars.JwtConfigSecretKey);
var tokenHandler = new JwtSecurityTokenHandler(); // 创建一个JwtSecurityTokenHandler类，用来后续操作 var tokenHandler = new JwtSecurityTokenHandler(); // 创建一个JwtSecurityTokenHandler类，用来后续操作
var jwtToken = tokenHandler.ReadToken(token) as JwtSecurityToken; // 将字符串token解码成token对象 var jwtToken = tokenHandler.ReadToken(aesDecryptToken) as JwtSecurityToken; // 将字符串token解码成token对象
if (jwtToken == null) if (jwtToken == null)
return 0; return 0;
var validationParameters = new TokenValidationParameters() // 生成验证token的参数 var validationParameters = new TokenValidationParameters() // 生成验证token的参数
@@ -111,7 +115,7 @@ namespace CoreCms.Net.Auth
RequireExpirationTime = true, RequireExpirationTime = true,
}; };
SecurityToken securityToken; // 接受解码后的token对象 SecurityToken securityToken; // 接受解码后的token对象
var principal = tokenHandler.ValidateToken(token, validationParameters, out securityToken); var principal = tokenHandler.ValidateToken(aesDecryptToken, validationParameters, out securityToken);
if (securityToken == null || string.IsNullOrEmpty(securityToken.Id)) if (securityToken == null || string.IsNullOrEmpty(securityToken.Id))
{ {