perf(登录): 及时删除废弃的token缓存

2023-02-09 17:14:28 +08:00 · 2023-02-09 17:14:28 +08:00 · 699aafaf30
commit 699aafaf30
parent a35d01c42c
1 changed files with 2 additions and 0 deletions
--- a/backend/src/main/java/io/dataease/auth/filter/JWTFilter.java
+++ b/backend/src/main/java/io/dataease/auth/filter/JWTFilter.java
@ -71,9 +71,11 @@ public class JWTFilter extends BasicHttpAuthenticationFilter {
        }
        // 当没有出现登录超时 且需要刷新token 则执行刷新token
        if (JWTUtils.loginExpire(authorization)) {
+            TokenCacheUtils.remove(authorization);
            throw new AuthenticationException(expireMessage);
        }
        if (JWTUtils.needRefresh(authorization)) {
+            TokenCacheUtils.remove(authorization);
            authorization = refreshToken(request, response);
        }
        JWTToken token = new JWTToken(authorization);