admin/MaxKey
1
0
Fork 0
mirror of https://gitee.com/dromara/MaxKey.git synced 2025-12-08 09:58:56 +08:00
Code Issues Packages Projects Releases Wiki Activity

#I7TA1R [BUG]Oauth2协议中token自检端点的问题

Browse Source
This commit is contained in:
MaxKey 2023-08-15 15:06:26 +08:00
parent e246d50e86
commit fa1b812a1e
1 changed files with 6 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
maxkey-common/src/main/java/org/maxkey/util/RequestTokenUtils.java
View File

@ -25,8 +25,8 @@ public class RequestTokenUtils {
* 从请求中获取token令牌信息,优先级顺序如下 * 从请求中获取token令牌信息,优先级顺序如下
* <p> * <p>
* 1) 参数 access_token <br/> * 1) 参数 access_token <br/>
* 2) header 的Authorization或者authorization <br/> * 2) 参数 token <br/>
* 3) 参数 token <br/> * 3) header 的Authorization或者authorization <br/>
* </p> * </p>
* *
* @param request * @param request
@ -35,14 +35,15 @@ public class RequestTokenUtils {
public static String resolveAccessToken(HttpServletRequest request) { public static String resolveAccessToken(HttpServletRequest request) {
String access_token = request.getParameter(ACCESS_TOKEN); String access_token = request.getParameter(ACCESS_TOKEN);
if(StringUtils.isBlank(access_token)) {
access_token = request.getParameter(TOKEN);
}
if(StringUtils.isBlank(access_token)) { if(StringUtils.isBlank(access_token)) {
//for header authorization bearer //for header authorization bearer
access_token = AuthorizationHeaderUtils.resolveBearer(request); access_token = AuthorizationHeaderUtils.resolveBearer(request);
} }
if(StringUtils.isBlank(access_token)) {
access_token = request.getParameter(TOKEN);
}
return access_token; return access_token;
} }