feat: 优化token验证逻辑,添加异常处理以增强稳定性
This commit is contained in:
@@ -56,6 +56,8 @@ export class UserSecret {
|
||||
if (oauth.getTokenType(token) === 'jwks') {
|
||||
// 先尝试作为jwt token验证,如果验证成功则直接返回用户信息
|
||||
console.log('[jwksManager] 验证token');
|
||||
try {
|
||||
|
||||
const verified = await jwksManager.verify(token);
|
||||
if (verified) {
|
||||
const sub = verified.sub;
|
||||
@@ -74,6 +76,10 @@ export class UserSecret {
|
||||
} else {
|
||||
return null;
|
||||
}
|
||||
} catch (e) {
|
||||
console.error('[jwksManager] 验证token失败', e);
|
||||
return null;
|
||||
}
|
||||
}
|
||||
if (!oauth.isSecretKey(token)) {
|
||||
return await oauth.verifyToken(token);
|
||||
|
||||
Reference in New Issue
Block a user