66 lines
2.3 KiB
C#
66 lines
2.3 KiB
C#
using LY.App.Common.Redis;
|
||
using StackExchange.Redis;
|
||
using System.IdentityModel.Tokens.Jwt;
|
||
|
||
namespace LY.App.MiddleWare
|
||
{
|
||
public class TokenValidationMiddleware : IMiddleware
|
||
{
|
||
private RedisService _redis;
|
||
public TokenValidationMiddleware(RedisService redisHelper)
|
||
{
|
||
_redis = redisHelper;
|
||
}
|
||
public async Task InvokeAsync(HttpContext context, RequestDelegate next)
|
||
{
|
||
// 排除不需要Token验证的API
|
||
if (IsExcludedPath(context.Request.Path))
|
||
{
|
||
await next(context);
|
||
return;
|
||
}
|
||
// 获取Token
|
||
var token = context.Request.Headers["Authorization"].ToString().Replace("Bearer ", "");
|
||
if (!string.IsNullOrEmpty(token))
|
||
{
|
||
// 验证Token是否有效
|
||
var handler = new JwtSecurityTokenHandler();
|
||
var jsonToken = handler.ReadToken(token) as JwtSecurityToken;
|
||
if (jsonToken != null)
|
||
{
|
||
// 从Token中获取数据
|
||
var username = jsonToken.Claims.FirstOrDefault(claim => claim.Type == "sub")?.Value;
|
||
if (username != null)
|
||
{
|
||
if (await _redis.ExistsAsync(RedisKeyList.TokenUser(username)))
|
||
{
|
||
// Token和数据验证通过，继续处理请求
|
||
await next(context);
|
||
return;
|
||
}
|
||
}
|
||
}
|
||
}
|
||
|
||
else
|
||
{
|
||
// Token不存在，返回未授权
|
||
context.Response.StatusCode = 401;
|
||
await context.Response.WriteAsync("Unauthorized: Invalid Token");
|
||
}
|
||
}
|
||
/// <summary>
|
||
/// 这是放不需要过滤的api地址
|
||
/// </summary>
|
||
/// <param name="path"></param>
|
||
/// <returns></returns>
|
||
private bool IsExcludedPath(PathString path)
|
||
{
|
||
// 根据实际情况定义不需要Token验证的API路径
|
||
string[] arry = { "login" };
|
||
return arry.Any(s => path.Value.Contains(s));
|
||
// return path.StartsWithSegments("/api/public");
|
||
}
|
||
}
|
||
}
|