feat: 登录和注销时操作客户端 cookie

Author: cadecode

framework/framework_base/src/main/java/com/github/cadecode/uniboot/framework/base/security/strategy/JwtTokenAuthStrategyImpl.java

@@ -1,6 +1,7 @@
 package com.github.cadecode.uniboot.framework.base.security.strategy;
 
 import cn.hutool.core.util.StrUtil;
+import cn.hutool.extra.servlet.ServletUtil;
 import cn.hutool.json.JSONObject;
 import com.github.cadecode.uniboot.common.core.extension.strategy.StrategyContext;
 import com.github.cadecode.uniboot.common.core.util.TokenUtil;
@@ -64,6 +65,7 @@ public void handler(HttpServletRequest request, HttpServletResponse response, Fi
                     SecurityUtil.getExpiration(), SecurityUtil.getSecret());
             // token 放在请求头
             response.addHeader(HttpConst.HEAD_TOKEN, newJwtToken);
+            ServletUtil.addCookie(response, HttpConst.HEAD_TOKEN, newJwtToken, SecurityUtil.getExpiration().intValue());
         }
         filterChain.doFilter(request, response);
     }

framework/framework_base/src/main/java/com/github/cadecode/uniboot/framework/base/security/strategy/RedisTokenAuthStrategyImpl.java

@@ -1,9 +1,11 @@
 package com.github.cadecode.uniboot.framework.base.security.strategy;
 
 import cn.hutool.core.util.StrUtil;
+import cn.hutool.extra.servlet.ServletUtil;
 import com.github.cadecode.uniboot.common.core.extension.strategy.StrategyContext;
 import com.github.cadecode.uniboot.common.plugin.cache.util.KeyGeneUtil;
 import com.github.cadecode.uniboot.common.plugin.cache.util.RedisUtil;
+import com.github.cadecode.uniboot.framework.api.consts.HttpConst;
 import com.github.cadecode.uniboot.framework.api.consts.KeyPrefixConst;
 import com.github.cadecode.uniboot.framework.api.enums.AuthErrorEnum;
 import com.github.cadecode.uniboot.framework.api.enums.AuthModelEnum;
@@ -49,6 +51,7 @@ public void handler(HttpServletRequest request, HttpServletResponse response, Fi
         }
         // 用户存在，刷新过期时间
         RedisUtil.expire(loginUserKey, SecurityUtil.getExpiration(), TimeUnit.SECONDS);
+        ServletUtil.addCookie(response, HttpConst.HEAD_TOKEN, uuidToken, SecurityUtil.getExpiration().intValue());
         // 设置 AuthenticationToken
         setAuthentication(request, sysUserDetails);
         filterChain.doFilter(request, response);

framework/framework_svc/src/main/java/com/github/cadecode/uniboot/framework/svc/bean/vo/SysUserVo.java

@@ -2,6 +2,7 @@
 
 import com.fasterxml.jackson.annotation.JsonIgnore;
 import com.github.cadecode.uniboot.common.core.web.response.PageParams;
+import com.github.cadecode.uniboot.framework.base.security.model.SysUserDetails;
 import com.github.cadecode.uniboot.framework.svc.bean.vo.SysMenuVo.SysMenuTreeResVo;
 import lombok.*;
 
@@ -128,6 +129,7 @@ public static class SysUserRolesResVo {
     @NoArgsConstructor
     @Builder
     public static class SysUserInfoResVo {
+        private SysUserDetails userDetails;
         private List<SysMenuTreeResVo> menuList;
     }
 }

framework/framework_svc/src/main/java/com/github/cadecode/uniboot/framework/svc/controller/SysUserController.java

@@ -59,7 +59,7 @@ public class SysUserController {
     public SysUserInfoResVo getInfo() {
         SysUserDetails userDetails = SecurityUtil.getUserDetails(null);
         List<SysMenuTreeResVo> sysMenuTreeResVos = sysMenuService.listTreeVoByRoles(userDetails.getRoles());
-        return SysUserInfoResVo.builder().menuList(sysMenuTreeResVos).build();
+        return SysUserInfoResVo.builder().userDetails(userDetails).menuList(sysMenuTreeResVos).build();
     }
 
     @ApiOperation("修改用户信息（用户中心）")

framework/framework_svc/src/main/java/com/github/cadecode/uniboot/framework/svc/security/SignOutSuccessHandler.java

@@ -43,6 +43,7 @@ public void onLogoutSuccess(HttpServletRequest request, HttpServletResponse resp
             String loginUserKey = KeyGeneUtil.key(KeyPrefixConst.LOGIN_USER, uuidToken);
             RedisUtil.del(loginUserKey);
         }
+        ServletUtil.addCookie(response, HttpConst.HEAD_TOKEN, "", 0);
         // 写入响应
         ApiResult<Object> result = ApiResult.error(AuthErrorEnum.TOKEN_LOGOUT).path(FrameSecurityConfig.LOGOUT_URL);
         response.setStatus(AuthErrorEnum.TOKEN_LOGOUT.getStatus());