#I7TA1R [BUG]Oauth2协议中token自检端点的问题

This commit is contained in:
MaxKey 2023-08-15 15:06:26 +08:00
parent e246d50e86
commit fa1b812a1e

View File

@ -25,8 +25,8 @@ public class RequestTokenUtils {
* 从请求中获取token令牌信息,优先级顺序如下
* <p>
* 1) 参数 access_token <br/>
* 2) header 的Authorization或者authorization <br/>
* 3) 参数 token <br/>
* 2) 参数 token <br/>
* 3) header 的Authorization或者authorization <br/>
* </p>
*
* @param request
@ -35,14 +35,15 @@ public class RequestTokenUtils {
public static String resolveAccessToken(HttpServletRequest request) {
String access_token = request.getParameter(ACCESS_TOKEN);
if(StringUtils.isBlank(access_token)) {
access_token = request.getParameter(TOKEN);
}
if(StringUtils.isBlank(access_token)) {
//for header authorization bearer
access_token = AuthorizationHeaderUtils.resolveBearer(request);
}
if(StringUtils.isBlank(access_token)) {
access_token = request.getParameter(TOKEN);
}
return access_token;
}