fix(auth): 修复刷新令牌中间件对AJAX请求的响应处理
- 添加对AJAX请求的检测逻辑 - 对AJAX请求返回401状态码而不是重定向 - 保持普通请求的登录页面重定向功能 - 确保令牌黑名单验证后正确响应不同类型的客户端请求
This commit is contained in:
@@ -92,7 +92,10 @@ namespace YLErp.Web.Middleware
|
||||
logger.Info($"[中间件] Token在黑名单中,拒绝访问 - JTI: {jti}, Path: {path}");
|
||||
context.Response.Cookies.Delete("Access-Token");
|
||||
context.Response.Cookies.Delete("Access-Token-Encrypt");
|
||||
context.Response.Redirect("/Account/Login");
|
||||
if (context.Request.Headers["X-Requested-With"] == "XMLHttpRequest")
|
||||
context.Response.StatusCode = 401;
|
||||
else
|
||||
context.Response.Redirect("/Account/Login");
|
||||
return;
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user