62 lines
1.6 KiB
Go
62 lines
1.6 KiB
Go
package member
|
||
|
||
import (
|
||
"biz-member-gateway/internal/domain"
|
||
"biz-member-gateway/internal/svc"
|
||
"biz-member-gateway/internal/types"
|
||
"context"
|
||
|
||
"code.30cm.net/digimon/app-cloudep-permission-server/pkg/domain/token"
|
||
"code.30cm.net/digimon/library-go/errs"
|
||
"code.30cm.net/digimon/proto-all/pkg/permission"
|
||
|
||
"github.com/zeromicro/go-zero/core/logx"
|
||
)
|
||
|
||
type RefreshAccessTokenLogic struct {
|
||
logx.Logger
|
||
ctx context.Context
|
||
svcCtx *svc.ServiceContext
|
||
}
|
||
|
||
// NewRefreshAccessTokenLogic 更新 Access Token
|
||
func NewRefreshAccessTokenLogic(ctx context.Context, svcCtx *svc.ServiceContext) *RefreshAccessTokenLogic {
|
||
return &RefreshAccessTokenLogic{
|
||
Logger: logx.WithContext(ctx),
|
||
ctx: ctx,
|
||
svcCtx: svcCtx,
|
||
}
|
||
}
|
||
|
||
func (l *RefreshAccessTokenLogic) RefreshAccessToken(req *types.UpdateTokenReq) (*types.LoginTokenResp, error) {
|
||
data, err := l.svcCtx.TokenRPC.GetSystemClaimByAccessToken(l.ctx, &permission.GetSystemClaimReq{
|
||
AccessToken: req.Token,
|
||
IsExpired: false,
|
||
})
|
||
if err != nil {
|
||
return nil, err
|
||
}
|
||
|
||
uid := data.Data[token.UID.String()]
|
||
if uid != req.UID {
|
||
return nil, errs.Forbidden("failed to verify token user")
|
||
}
|
||
|
||
t, err := l.svcCtx.TokenRPC.RefreshToken(l.ctx, &permission.RefreshTokenReq{
|
||
Token: req.RefreshToken,
|
||
Scope: data.Data[token.Scope.String()],
|
||
Expires: 0, // 指定到期的時間，不給會交由底層給（token repo）
|
||
DeviceId: data.Data[token.Device.String()],
|
||
})
|
||
if err != nil {
|
||
return nil, err
|
||
}
|
||
|
||
return &types.LoginTokenResp{
|
||
UID: req.UID,
|
||
AccessToken: t.Token,
|
||
RefreshToken: t.OneTimeToken,
|
||
TokenType: domain.TokenTypeBearer,
|
||
}, nil
|
||
}
|