AngularJS 或 SPA 与 JWT - 过期和刷新

使用AngularJS和JWT实现过期和刷新

javascript
app.factory('authInterceptor', function($q, $window) {
  return {
    request: function(config) {
      config.headers = config.headers || {};
      var token = $window.localStorage.getItem('jwtToken');
      if (token) {
        // 检查JWT是否过期
        var base64Url = token.split('.')[1];
        var base64 = base64Url.replace(/-/g, '+').replace(/_/g, '/');
        var jsonPayload = decodeURIComponent($window.atob(base64).split('').map(function(c) {
          return '%' + ('00' + c.charCodeAt(0).toString(16)).slice(-2);
        }).join(''));
        var payload = JSON.parse(jsonPayload);
        if (payload.exp && payload.exp < Date.now() / 1000) {
          // 发送刷新令牌的请求
          return $http.post('/refreshToken').then(function(response) {
            var newToken = response.data.token;
            $window.localStorage.setItem('jwtToken', newToken);
            config.headers.Authorization = 'Bearer ' + newToken;
            return config;
          });
        } else {
          config.headers.Authorization = 'Bearer ' + token;
          return config;
        }
      } else {
        return config;
      }
    }
  };
});
app.config(function($httpProvider) {
  $httpProvider.interceptors.push('authInterceptor');
});