mirror of
https://gitee.com/dromara/MaxKey.git
synced 2025-12-07 17:38:32 +08:00
#I7TA1R [BUG]Oauth2协议中token自检端点的问题
This commit is contained in:
parent
e246d50e86
commit
fa1b812a1e
@ -25,8 +25,8 @@ public class RequestTokenUtils {
|
||||
* 从请求中获取token令牌信息,优先级顺序如下
|
||||
* <p>
|
||||
* 1) 参数 access_token <br/>
|
||||
* 2) header 的Authorization或者authorization <br/>
|
||||
* 3) 参数 token <br/>
|
||||
* 2) 参数 token <br/>
|
||||
* 3) header 的Authorization或者authorization <br/>
|
||||
* </p>
|
||||
*
|
||||
* @param request
|
||||
@ -35,14 +35,15 @@ public class RequestTokenUtils {
|
||||
public static String resolveAccessToken(HttpServletRequest request) {
|
||||
String access_token = request.getParameter(ACCESS_TOKEN);
|
||||
|
||||
if(StringUtils.isBlank(access_token)) {
|
||||
access_token = request.getParameter(TOKEN);
|
||||
}
|
||||
|
||||
if(StringUtils.isBlank(access_token)) {
|
||||
//for header authorization bearer
|
||||
access_token = AuthorizationHeaderUtils.resolveBearer(request);
|
||||
}
|
||||
|
||||
if(StringUtils.isBlank(access_token)) {
|
||||
access_token = request.getParameter(TOKEN);
|
||||
}
|
||||
return access_token;
|
||||
}
|
||||
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user