BookingHeChuan/Myshipping.Web.Core/Handlers/JwtHandler.cs

using Furion;
using Furion.Authorization;
using Furion.DataEncryption;
using Myshipping.Core;
using Myshipping.Core.Service;
using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Http;
using System.Threading.Tasks;
using Furion.Logging;
using System.Diagnostics;

namespace Myshipping.Web.Core;

public class JwtHandler : AppAuthorizeHandler
{
#if DEBUG
    public JwtHandler()
    {

    }
#else
    private ISysMenuService _sysMenuService;

    public JwtHandler(ISysMenuService sysMenuService)
    {

        _sysMenuService = sysMenuService;

    }
#endif


    /// <summary>
    /// 重写 Handler 添加自动刷新
    /// </summary>
    /// <param name="context"></param>
    /// <returns></returns>
    public override async Task HandleAsync(AuthorizationHandlerContext context)
    {
        // 自动刷新Token
        if (JWTEncryption.AutoRefreshToken(context, context.GetCurrentHttpContext()))
        {
            await AuthorizeHandleAsync(context);
        }
        else context.Fail(); // 授权失败
    }

    /// <summary>
    /// 授权判断逻辑，授权通过返回 true，否则返回 false
    /// </summary>
    /// <param name="context"></param>
    /// <param name="httpContext"></param>
    /// <returns></returns>
    public override async Task<bool> PipelineAsync(AuthorizationHandlerContext context, DefaultHttpContext httpContext)
    {
        // 此处已经自动验证 Jwt Token的有效性了，无需手动验证
        return await CheckAuthorzieAsync(httpContext);
    }

    /// <summary>
    /// 检查权限
    /// </summary>
    /// <param name="httpContext"></param>
    /// <returns></returns>
    private async Task<bool> CheckAuthorzieAsync(DefaultHttpContext httpContext)
    {
        // 管理员跳过判断
        if (UserManager.IsSuperAdmin) return true;

        // 路由名称
        var routeName = httpContext.Request.Path.Value.Substring(1).Replace("/", ":");

        //字典数据前端需要，允许获取
        if (routeName == "sysDictType:tree") return true;


        if (routeName == "sysUser:tree") return true;

        //用户修改密码权限：默认通过，即不需要给角色授权，也具有此权限
        if (routeName == "sysUser:updatePwd") return true;

        Stopwatch sw = Stopwatch.StartNew();
#if DEBUG
        var _sysMenuService = App.GetService<ISysMenuService>();
        var allPermission = await _sysMenuService.GetAllPermission();
#else
        var allPermission = await _sysMenuService.GetAllPermission();
#endif
        httpContext.Response.Headers["CheckTimeCheckAuthorzie1"] = sw.ElapsedMilliseconds.ToString();
        if (!allPermission.Contains(routeName))
        {
            sw.Stop();
            return true;
        }

        // 获取用户权限集合（按钮或API接口）
        var permissionList = await _sysMenuService.GetLoginPermissionList(UserManager.UserId);
        httpContext.Response.Headers["CheckTimeCheckAuthorzie2"] = sw.ElapsedMilliseconds.ToString();
        sw.Stop();
        // 检查授权
        return permissionList.Contains(routeName);
    }
}