mirror of
https://github.com/go-admin-team/go-admin.git
synced 2026-09-21 02:04:09 +00:00
zhangwenjian
bb34108831
close #820 GET /api/v1/refresh_token 用业务 token 即可换取新 token，而续期上限 MaxRefresh 依据的 orig_iat 在每次续期时被一并重置，上限永远无法到达 —— token 一旦泄露即等同于永久访问权，且无任何吊销手段。 该路由此前还位于 CasbinExclude 中，不受 Casbin 约束，任何角色的已登录用户 都可调用。 官方前端从未使用它：store 中虽有 refreshToken action，但全仓库无一处 dispatch，属死代码。移除不影响正常登录与鉴权流程。 破坏性变更：自行调用该端点实现续期的使用者需改为重新登录。正确的无感续期 应在 go-admin-core 中区分 access token 与 refresh token 后重新实现，不应 沿用此路由。
43 lines
1.6 KiB
Go
43 lines
1.6 KiB
Go
package middleware
|
|
|
|
type UrlInfo struct {
|
|
Url string
|
|
Method string
|
|
}
|
|
|
|
// CasbinExclude casbin 排除的路由列表
|
|
var CasbinExclude = []UrlInfo{
|
|
{Url: "/api/v1/dict/type-option-select", Method: "GET"},
|
|
{Url: "/api/v1/dict-data/option-select", Method: "GET"},
|
|
{Url: "/api/v1/deptTree", Method: "GET"},
|
|
{Url: "/api/v1/db/tables/page", Method: "GET"},
|
|
{Url: "/api/v1/db/columns/page", Method: "GET"},
|
|
{Url: "/api/v1/gen/toproject/:tableId", Method: "GET"},
|
|
{Url: "/api/v1/gen/todb/:tableId", Method: "GET"},
|
|
{Url: "/api/v1/gen/tabletree", Method: "GET"},
|
|
{Url: "/api/v1/gen/preview/:tableId", Method: "GET"},
|
|
{Url: "/api/v1/gen/apitofile/:tableId", Method: "GET"},
|
|
{Url: "/api/v1/getCaptcha", Method: "GET"},
|
|
{Url: "/api/v1/getinfo", Method: "GET"},
|
|
{Url: "/api/v1/menuTreeselect", Method: "GET"},
|
|
{Url: "/api/v1/menurole", Method: "GET"},
|
|
{Url: "/api/v1/menuids", Method: "GET"},
|
|
{Url: "/api/v1/roleMenuTreeselect/:roleId", Method: "GET"},
|
|
{Url: "/api/v1/roleDeptTreeselect/:roleId", Method: "GET"},
|
|
{Url: "/api/v1/configKey/:configKey", Method: "GET"},
|
|
{Url: "/api/v1/app-config", Method: "GET"},
|
|
{Url: "/api/v1/user/profile", Method: "GET"},
|
|
{Url: "/info", Method: "GET"},
|
|
{Url: "/api/v1/login", Method: "POST"},
|
|
{Url: "/api/v1/logout", Method: "POST"},
|
|
{Url: "/api/v1/user/avatar", Method: "POST"},
|
|
{Url: "/api/v1/user/pwd", Method: "PUT"},
|
|
{Url: "/api/v1/metrics", Method: "GET"},
|
|
{Url: "/api/v1/health", Method: "GET"},
|
|
{Url: "/", Method: "GET"},
|
|
{Url: "/api/v1/server-monitor", Method: "GET"},
|
|
{Url: "/api/v1/public/uploadFile", Method: "POST"},
|
|
{Url: "/api/v1/user/pwd/set", Method: "PUT"},
|
|
{Url: "/api/v1/sys-user", Method: "PUT"},
|
|
}
|