对前端来说token代表了什么_前端token刷新并发处理

use Closure;

use JWTAuth;

use Tymon\JWTAuth\Exceptions\JWTException;

use Tymon\JWTAuth\Exceptions\TokenExpiredException;

use Tymon\JWTAuth\Exceptions\TokenInvalidException;

use Illuminate\Support\Facades\Redis;classGetUserFromToken

{publicfunction handle($request, Closure $next)

{

$newToken= null;

$auth=JWTAuth::parseToken();if (! $token = $auth->setRequest($request)->getToken()) {return response()->json(['code' => '2','msg' => '无参数token','data' => '',

]);

}try{

$user= $auth->authenticate($token);if (!$user) {return response()->json(['code' => '2','msg' => '未查询到该用户信息','data' => '',

]);

}

$request->headers->set('Authorization','Bearer'.$token);

}catch(TokenExpiredException $e) {try{

sleep(rand(1,5)/100);

$newToken=JWTAuth::refresh($token);

$request->headers->set('Authorization','Bearer'.$newToken); //给当前的请求设置性的token,以备在本次请求中需要调用用户信息//将旧token存储在redis中,30秒内再次请求是有效的

Redis::setex('token_blacklist:'.$token,30,$newToken);

}catch(JWTException $e) {//在黑名单的有效期,放行

if($newToken = Redis::get('token_blacklist:'.$token)){

$request->headers->set('Authorization','Bearer'.$newToken); //给当前的请求设置性的token,以备在本次请求中需要调用用户信息

return$next($request);

}//过期用户

return response()->json(['code' => '2','msg' => '账号信息过期了，请重新登录',

]);

}

}catch(JWTException $e) {return response()->json(['code' => '2','msg' => '无效token','data' => '',

]);

}

$response=$next($request);if($newToken) {

$response->headers->set('Authorization', 'Bearer'.$newToken);

}return$response;

}

}