:art:优化token生成以及加强验证

2024-06-18 15:20:17 +08:00
parent 1950150f42
commit 3e112cb672
6 changed files with 45 additions and 7 deletions
--- a/middleware/authorization.go
+++ b/middleware/authorization.go
@@ -28,6 +28,13 @@ func Authorization() gin.HandlerFunc {
 			return
 		}

+		// 如果token的颁发者与请求的站点不一致，则直接给它狗日的丢出去
+		if userClaims.Issuer != utils.GetHost(c.Request.Header.Get("Referer")) {
+			utils.GinResponse(c).AuthorizationFailed()
+			c.Abort()
+			return
+		}
+
 		// 查询用户
 		user, err := repository.User().GetUserById(userClaims.ID)
 		if err != nil {