github
/
eladmin
mirror of https://github.com/elunez/eladmin
1
0
Fork 0
Code Issues Releases Wiki Activity

fix: TokenProvider类中复用JwtBuilder实例导致并发环境下Token生成错误 

close https://github.com/elunez/eladmin/issues/870
deploy
Jie Zheng 2025-06-19 17:47:29 +08:00
parent 92522cb5f4
commit caa7c6698f
1 changed files with 11 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
eladmin-system/src/main/java/me/zhengjie/modules/security/security/TokenProvider.java
View File

@ -42,8 +42,8 @@ import java.util.concurrent.TimeUnit;
@Component @Component
public class TokenProvider implements InitializingBean { public class TokenProvider implements InitializingBean {
private Key signingKey;
private JwtParser jwtParser; private JwtParser jwtParser;
private JwtBuilder jwtBuilder;
private final RedisUtils redisUtils; private final RedisUtils redisUtils;
private final SecurityProperties properties; private final SecurityProperties properties;
public static final String AUTHORITIES_UUID_KEY = "uid"; public static final String AUTHORITIES_UUID_KEY = "uid";
@ -56,13 +56,13 @@ public class TokenProvider implements InitializingBean {
@Override @Override
public void afterPropertiesSet() { public void afterPropertiesSet() {
// 解码Base64密钥并创建签名密钥
byte[] keyBytes = Decoders.BASE64.decode(properties.getBase64Secret()); byte[] keyBytes = Decoders.BASE64.decode(properties.getBase64Secret());
Key key = Keys.hmacShaKeyFor(keyBytes); this.signingKey = Keys.hmacShaKeyFor(keyBytes);
// 初始化 JwtParser
jwtParser = Jwts.parserBuilder() jwtParser = Jwts.parserBuilder()
.setSigningKey(key) .setSigningKey(signingKey) // 使用预生成的签名密钥
.build(); .build();
jwtBuilder = Jwts.builder()
.signWith(key, SignatureAlgorithm.HS512);
} }
/** /**
@ -79,9 +79,14 @@ public class TokenProvider implements InitializingBean {
claims.put(AUTHORITIES_UID_KEY, user.getUser().getId()); claims.put(AUTHORITIES_UID_KEY, user.getUser().getId());
// 设置UUID，确保每次Token不一样 // 设置UUID，确保每次Token不一样
claims.put(AUTHORITIES_UUID_KEY, IdUtil.simpleUUID()); claims.put(AUTHORITIES_UUID_KEY, IdUtil.simpleUUID());
return jwtBuilder // 直接调用 Jwts.builder() 创建新实例
return Jwts.builder()
// 设置自定义 Claims
.setClaims(claims) .setClaims(claims)
// 设置主题
.setSubject(user.getUsername()) .setSubject(user.getUsername())
// 使用预生成的签名密钥和算法签名
.signWith(signingKey, SignatureAlgorithm.HS512)
.compact(); .compact();
} }