Merge pull request #4499 from dataease/pr@dev@perf_token_cache

perf(登录): 及时删除废弃的token缓存
2023-02-09 17:19:04 +08:00 · 2023-02-09 17:19:04 +08:00 · eb985501b1
commit eb985501b1
parent a35d01c42c 699aafaf30
1 changed files with 2 additions and 0 deletions
--- a/backend/src/main/java/io/dataease/auth/filter/JWTFilter.java
+++ b/backend/src/main/java/io/dataease/auth/filter/JWTFilter.java
@ -71,9 +71,11 @@ public class JWTFilter extends BasicHttpAuthenticationFilter {
        }
        // 当没有出现登录超时 且需要刷新token 则执行刷新token
        if (JWTUtils.loginExpire(authorization)) {
+            TokenCacheUtils.remove(authorization);
            throw new AuthenticationException(expireMessage);
        }
        if (JWTUtils.needRefresh(authorization)) {
+            TokenCacheUtils.remove(authorization);
            authorization = refreshToken(request, response);
        }
        JWTToken token = new JWTToken(authorization);