添加项目文件。

apihost/Tnb.API.Entry/Handlers/JwtHandler.cs

@@ -0,0 +1,81 @@
+using JNPF.Authorization;
+using JNPF.Common.Const;
+using JNPF.Common.Core.Manager;
+using JNPF.Common.Enums;
+using JNPF.DataEncryption;
+using Microsoft.AspNetCore.Authorization;
+
+namespace JNPF.API.Entry.Handlers;
+
+/// <summary>
+/// jwt处理程序.
+/// </summary>
+public class JwtHandler : AppAuthorizeHandler
+{
+    /// <summary>
+    /// 重写 Handler 添加自动刷新.
+    /// </summary>
+    /// <param name="context"></param>
+    /// <returns></returns>
+    public override async Task HandleAsync(AuthorizationHandlerContext context)
+    {
+        // 自动刷新Token
+        if (JWTEncryption.AutoRefreshToken(context, context.GetCurrentHttpContext(),
+            App.GetOptions<JWTSettingsOptions>().ExpiredTime))
+        {
+            await AuthorizeHandleAsync(context);
+        }
+        else
+        {
+            context.Fail(); // 授权失败
+            DefaultHttpContext currentHttpContext = context.GetCurrentHttpContext();
+            if (currentHttpContext == null)
+                return;
+            currentHttpContext.SignoutToSwagger();
+        }
+    }
+
+    /// <summary>
+    /// 授权判断逻辑，授权通过返回 true，否则返回 false.
+    /// </summary>
+    /// <param name="context"></param>
+    /// <param name="httpContext"></param>
+    /// <returns></returns>
+    public override async Task<bool> PipelineAsync(AuthorizationHandlerContext context, DefaultHttpContext httpContext)
+    {
+        // 此处已经自动验证 Jwt Token的有效性了，无需手动验证
+        return await CheckAuthorzieAsync(httpContext);
+    }
+
+    /// <summary>
+    /// 检查权限.
+    /// </summary>
+    /// <param name="httpContext"></param>
+    /// <returns></returns>
+    private static async Task<bool> CheckAuthorzieAsync(DefaultHttpContext httpContext)
+    {
+        // 管理员跳过判断
+        if (App.User.FindFirst(ClaimConst.CLAINMADMINISTRATOR)?.Value == ((int)AccountType.Administrator).ToString())
+            return true;
+
+        // 路由名称
+        var routeName = httpContext.Request.Path.Value[1..].Replace("/", ":");
+        if (httpContext.Request.Path.StartsWithSegments("/api"))
+            routeName = httpContext.Request.Path.Value[5..].Replace("/", ":");
+
+        // 默认路由(获取登录用户信息)
+        var defalutRoute = new List<string>()
+        {
+            "oauth:CurrentUser"
+        };
+
+        if (defalutRoute.Contains(routeName)) return true;
+
+        // 获取用户权限集合（按钮或API接口）
+        //var permissionList = await App.GetService<ISysMenuService>().GetLoginPermissionList(userManager.UserId);
+
+        // 检查授权
+        //return permissionList.Contains(routeName);
+        return true;
+    }
+}