feat: 优化token验证逻辑,添加异常处理以增强稳定性

This commit is contained in:
2026-03-06 13:20:41 +08:00
parent 53204291ce
commit fb58d91e50

View File

@@ -56,6 +56,8 @@ export class UserSecret {
if (oauth.getTokenType(token) === 'jwks') { if (oauth.getTokenType(token) === 'jwks') {
// 先尝试作为jwt token验证如果验证成功则直接返回用户信息 // 先尝试作为jwt token验证如果验证成功则直接返回用户信息
console.log('[jwksManager] 验证token'); console.log('[jwksManager] 验证token');
try {
const verified = await jwksManager.verify(token); const verified = await jwksManager.verify(token);
if (verified) { if (verified) {
const sub = verified.sub; const sub = verified.sub;
@@ -74,6 +76,10 @@ export class UserSecret {
} else { } else {
return null; return null;
} }
} catch (e) {
console.error('[jwksManager] 验证token失败', e);
return null;
}
} }
if (!oauth.isSecretKey(token)) { if (!oauth.isSecretKey(token)) {
return await oauth.verifyToken(token); return await oauth.verifyToken(token);