重写http.js、token过期自动刷新机制(需要更新前端http.js,后台Sys_UserController.cs,ApiAuthorizeFilter.cs,HttpRequestMiddleware.cs)

Author: cq-panda

Vol.Vue/src/api/http.js

@@ -0,0 +1,57 @@
+@media screen and (max-width: 600px) {
+    .g-left{
+      display: none;
+    }
+    .g-right{
+        margin: 0  !important;
+        span,p{
+            font-size: 0.8rem  !important;
+            line-height: 2  !important;
+        }
+        li{
+            padding-left: 0  !important;
+        }
+    }
+    .content{
+        padding: 0  !important;
+        padding-right: 3px !important;
+    }
+    .links {
+        display: none !important;
+    }
+    .doc-menu{
+      
+        font-size: 1.5rem;
+        padding: 0.2rem 0.5rem;
+        border-bottom: 1px solid #eee;
+        display: block  !important;
+  
+    }
+    .g-p{
+        text-align: center;
+        padding: 0.5rem;
+        a{
+            font-size: 1.3rem !important;
+            margin: 0 !important;
+           padding: 0.4rem;
+        }
+    }
+    .coder-container{
+        .left{
+            display: none  !important;
+        }
+        .right{
+            margin: 0  !important;
+        }
+    }
+    .i-container{
+        padding: 1rem;
+        .list{
+            margin: 0  !important;
+        }
+        .nav{
+            display: none  !important;
+        }
+    } 
+   
+  }

Vol.Vue/src/views/document/doc.less

@@ -29,7 +29,7 @@ public void OnAuthorization(AuthorizationFilterContext context)
         {
            // is Microsoft.AspNetCore.Authentication.AllowAnonymousAttribute
             //if (context.Filters.Any(item => item is IAllowAnonymousFilter))
-            if (context.ActionDescriptor.EndpointMetadata.Any(item => item is AllowAnonymousAttribute))
+            if (context.ActionDescriptor.EndpointMetadata.Any(item => item is IAllowAnonymous))
             {
                 //如果使用了固定Token不过期，直接对token的合法性及token是否存在进行验证
                 if (context.Filters
@@ -66,11 +66,10 @@ public void OnAuthorization(AuthorizationFilterContext context)
 
             DateTime expDate = context.HttpContext.User.Claims.Where(x => x.Type == JwtRegisteredClaimNames.Exp)
                 .Select(x => x.Value).FirstOrDefault().GetTimeSpmpToDate();
-            //如果过期时间小于设置定分钟数的1/3时，返回状态需要刷新token
-            if (expDate < DateTime.Now || (expDate - DateTime.Now).TotalMinutes < AppSetting.ExpMinutes / 3)
+            //动态标识刷新token(2021.05.01)
+            if ((expDate - DateTime.Now).TotalMinutes < AppSetting.ExpMinutes/3)
             {
-                context.FilterResult(HttpStatusCode.Accepted, "Token即将过期,请更换token");//202
-                return;
+                context.HttpContext.Response.Headers.Add("vol_exp", "1");
             }
         }
     }

Vue.Net/VOL.Core/Filters/ApiAuthorizeFilter.cs

@@ -14,7 +14,8 @@ public static Func<RequestDelegate, RequestDelegate> Context
             {
                 return next => async context =>
                 {
-
+                    //动态标识刷新token(2021.05.01)
+                    context.Response.Headers.Add("Access-Control-Expose-Headers", "vol_exp");
                     var stream = context.Request.Body;
                     if (stream == Stream.Null || stream.CanSeek)
                     {

Vue.Net/VOL.Core/Middleware/HttpRequestMiddleware.cs

@@ -2,18 +2,24 @@
 using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.Mvc;
 using Microsoft.Extensions.Caching.Memory;
+using Microsoft.Extensions.DependencyInjection;
 using System;
+using System.Collections.Concurrent;
+using System.Linq;
 using System.Linq.Expressions;
 using System.Threading.Tasks;
+using VOL.Core.CacheManager;
 using VOL.Core.Configuration;
 using VOL.Core.Controllers.Basic;
 using VOL.Core.DBManager;
 using VOL.Core.EFDbContext;
+using VOL.Core.Enums;
 using VOL.Core.Extensions;
 using VOL.Core.Filters;
 using VOL.Core.Infrastructure;
 using VOL.Core.ManageUser;
 using VOL.Core.ObjectActionValidator;
+using VOL.Core.Services;
 using VOL.Core.Utilities;
 using VOL.Entity.AttributeManager;
 using VOL.Entity.DomainModels;
@@ -26,19 +32,93 @@ namespace VOL.System.Controllers
     [Route("api/User")]
     public partial class Sys_UserController
     {
+        private ISys_UserRepository _userRepository;
+        private ICacheService _cache;
+        [ActivatorUtilitiesConstructor]
+        public Sys_UserController(
+               ISys_UserService userService,
+               ISys_UserRepository userRepository,
+               ICacheService cahce
+              )
+          : base(userService)
+        {
+            _userRepository = userRepository;
+            _cache = cahce;
+        }
+
         [HttpPost, HttpGet, Route("login"), AllowAnonymous]
         [ObjectModelValidatorFilter(ValidatorModel.Login)]
-        public async Task<IActionResult> Login([FromBody]LoginInfo loginInfo)
+        public async Task<IActionResult> Login([FromBody] LoginInfo loginInfo)
         {
             return Json(await Service.Login(loginInfo));
         }
 
-        [HttpPost, Route("replaceToken"), AllowAnonymous]
-        public async Task<IActionResult> ReplaceToken()
+        private readonly ConcurrentDictionary<int, object> _lockCurrent = new ConcurrentDictionary<int, object>();
+        [HttpPost, Route("replaceToken")]
+        public IActionResult ReplaceToken()
         {
-            return Json(await Service.ReplaceToken());
+            WebResponseContent responseContent = new WebResponseContent();
+            string error = "";
+            string key = $"rp:Token:{UserContext.Current.UserId}";
+            UserInfo userInfo = null;
+            try
+            {
+                //如果5秒内替换过token,直接使用最新的token(防止一个页面多个并发请求同时替换token导致token错位)
+                if (_cache.Exists(key))
+                {
+                    return Json(responseContent.OK(null, _cache.Get(key)));
+                }
+                var _obj = _lockCurrent.GetOrAdd(UserContext.Current.UserId, new object() { });
+                lock (_obj)
+                {
+                    if (_cache.Exists(key))
+                    {
+                        return Json(responseContent.OK(null, _cache.Get(key)));
+                    }
+                    string requestToken = HttpContext.Request.Headers[AppSetting.TokenHeaderName];
+                    requestToken = requestToken?.Replace("Bearer ", "");
+
+                    if (JwtHelper.IsExp(requestToken)) return Json(responseContent.Error("Token已过期!"));
+
+                    int userId = UserContext.Current.UserId;
+
+                    userInfo = _userRepository.FindAsIQueryable(x => x.User_Id == userId).Select(
+                             s => new UserInfo()
+                             {
+                                 User_Id = userId,
+                                 UserName = s.UserName,
+                                 UserTrueName = s.UserTrueName,
+                                 Role_Id = s.Role_Id,
+                                 RoleName = s.RoleName
+                             }).FirstOrDefault();
+
+                    if (userInfo == null) return Json(responseContent.Error("未查到用户信息!"));
+
+                    string token = JwtHelper.IssueJwt(userInfo);
+                    //移除当前缓存
+                    _cache.Remove(userId.GetUserIdKey());
+                    //只更新的token字段
+                    _userRepository.Update(new Sys_User() { User_Id = userId, Token = token }, x => x.Token, true);
+                    //添加一个5秒缓存
+                    _cache.Add(key, token, 5);
+                    responseContent.OK(null, token);
+                }
+            }
+            catch (Exception ex)
+            {
+                error = ex.Message + ex.StackTrace;
+                responseContent.Error("token替换异常");
+            }
+            finally
+            {
+                _lockCurrent.TryRemove(UserContext.Current.UserId, out object val);
+                string _message = $"用户{userInfo?.User_Id}_{userInfo?.UserTrueName},({(responseContent.Status ? "token替换成功": "token替换失败")})";
+                Logger.Info(LoggerType.ReplaceToeken, _message, null, error);
+            }
+            return Json(responseContent);
         }
 
+
         [HttpPost, Route("modifyPwd")]
         [ApiActionPermission]
         //通过ObjectGeneralValidatorFilter校验参数，不再需要if esle判断OldPwd与NewPwd参数
@@ -76,7 +156,7 @@ public IActionResult ModifyUserPwd(string password, string userName)
             repository.Update(user, x => new { x.UserPwd }, true);
             //如果用户在线，强制下线
             UserContext.Current.LogOut(user.User_Id);
-            return Json(webResponse.OK("密码修改成功")); 
+            return Json(webResponse.OK("密码修改成功"));
         }
 
         /// <summary>