|
|
@@ -447,8 +447,6 @@ async def refresh_access_token(refresh_token: str) -> Token:
|
|
|
headers={"WWW-Authenticate": "Bearer"},
|
|
|
)
|
|
|
|
|
|
- print("刷新令牌")
|
|
|
-
|
|
|
try:
|
|
|
payload = jwt.decode(refresh_token, config.SECRET_KEY, algorithms=[config.ALGORITHM])
|
|
|
if payload.get("type") != "refresh":
|
|
|
@@ -465,7 +463,7 @@ async def refresh_access_token(refresh_token: str) -> Token:
|
|
|
# 验证Redis中的刷新令牌哈希
|
|
|
refresh_hash = hashlib.sha256(refresh_token.encode()).hexdigest()
|
|
|
stored_hash = redis_client.get(f"refresh:{user_id}")
|
|
|
- if not stored_hash or stored_hash.decode() != refresh_hash:
|
|
|
+ if not stored_hash or stored_hash != refresh_hash:
|
|
|
raise credentials_exception
|
|
|
|
|
|
# 验证用户是否存在
|