diff --git a/maxkey-common/src/main/java/org/maxkey/util/RequestTokenUtils.java b/maxkey-common/src/main/java/org/maxkey/util/RequestTokenUtils.java index 792c2c102..e17e92adc 100644 --- a/maxkey-common/src/main/java/org/maxkey/util/RequestTokenUtils.java +++ b/maxkey-common/src/main/java/org/maxkey/util/RequestTokenUtils.java @@ -18,14 +18,22 @@ import org.apache.commons.lang3.StringUtils; public class RequestTokenUtils { + public static String TOKEN = "token"; + + public static String ACCESS_TOKEN = "access_token"; /** - * resolveAccessToken + * 从请求中获取token令牌信息,优先级顺序如下 + *

+ * 1) 参数 access_token
+ * 2) header 的Authorization或者authorization
+ * 3) 参数 token
+ *

* * @param request * @return access_token */ public static String resolveAccessToken(HttpServletRequest request) { - String access_token = request.getParameter("access_token"); + String access_token = request.getParameter(ACCESS_TOKEN); if(StringUtils.isBlank(access_token)) { //for header authorization bearer @@ -33,7 +41,7 @@ public class RequestTokenUtils { } if(StringUtils.isBlank(access_token)) { - access_token = request.getParameter("token"); + access_token = request.getParameter(TOKEN); } return access_token; }