Micronaut配置不发出JWT刷新令牌

Question

token:
  jwt:
    signatures:
      secret:
        generator:
          refresh-token:
            secret: "${JWT_GENERATOR_SIGNATURE_SECRET:pleaseChangeThisSecretForANewOne}"  
          secret: "${JWT_GENERATOR_SIGNATURE_SECRET:pleaseChangeThisSecretForANewOne}"     

Answer 1

您可能缺少refreshTokenPersistence的实现。

我建议您阅读Micronaut安全文档的这一部分:https://micronaut-projects.github.io/micronaut-security/lates/guide/#refresh

下面是持久化单元的一个非常非常简单的实现。请不要忘记在实现中添加@singleton。我正好错过了这一点，这就是为什么micronaut在我自己的项目中最初没有生成刷新令牌的原因。

import io.micronaut.security.authentication.UserDetails;
import io.micronaut.security.token.event.RefreshTokenGeneratedEvent;
import io.micronaut.security.token.refresh.RefreshTokenPersistence;
import io.reactivex.BackpressureStrategy;
import io.reactivex.Flowable;
import org.reactivestreams.Publisher;

import javax.inject.Singleton;
import java.util.HashMap;
import java.util.Map;

@Singleton
public class MyRefreshTokenPersistence implements RefreshTokenPersistence {

    private final Map<String, UserDetails> storage = new HashMap<>();

    @Override
    public void persistToken(RefreshTokenGeneratedEvent event) {
        storage.put(event.getRefreshToken(), event.getUserDetails());
    }

    @Override
    public Publisher<UserDetails> getUserDetails(String refreshToken) {
        return Flowable.create(emitter -> {
            final UserDetails userDetails = storage.get(refreshToken);
            if ( userDetails != null ) {
                emitter.onNext(userDetails);
                emitter.onComplete();
            } else {
                emitter.onError(new IllegalArgumentException("refresh token unknown"));
            }
        }, BackpressureStrategy.BUFFER);
    }
}