diff --git a/YLErpDAL/Helpers/AuthHelper.cs b/YLErpDAL/Helpers/AuthHelper.cs index 3f88374c..d31b636f 100644 --- a/YLErpDAL/Helpers/AuthHelper.cs +++ b/YLErpDAL/Helpers/AuthHelper.cs @@ -36,9 +36,16 @@ namespace YLErp.Helpers { var key = new SymmetricSecurityKey(Encoding.ASCII.GetBytes(JwtSecretKey)); + // 添加 JTI (JWT ID) 用于黑名单机制 + var claims = new ClaimsIdentity(identity); + if (!claims.HasClaim(c => c.Type == "jti")) + { + claims.AddClaim(new Claim("jti", Guid.NewGuid().ToString("N"))); + } + var tokenDescriptor = new SecurityTokenDescriptor { - Subject = new ClaimsIdentity(identity), + Subject = claims, Expires = DateTime.UtcNow.AddSeconds(ExpireInSeconds), Issuer = JwtIssuer, Audience = JwtAudience,