From b7afe9496a95463c3cb13e9a733eae3103997195 Mon Sep 17 00:00:00 2001 From: Hanserwei <2628273921@qq.com> Date: Mon, 1 Dec 2025 20:08:50 +0800 Subject: [PATCH] feat(jwt): extend token expiration time and improve authentication filter - Extend JWT token expiration from 1 hour to 30 days - Improve Authorization header validation in authentication filter - Add null check for header before calling startsWith method - Import Strings utility class for better string handling --- .../com/hanserwei/jwt/filter/TokenAuthenticationFilter.java | 2 +- .../src/main/java/com/hanserwei/jwt/utils/JwtTokenHelper.java | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/weblog-module-jwt/src/main/java/com/hanserwei/jwt/filter/TokenAuthenticationFilter.java b/weblog-module-jwt/src/main/java/com/hanserwei/jwt/filter/TokenAuthenticationFilter.java index 667c954..bf9d5cc 100644 --- a/weblog-module-jwt/src/main/java/com/hanserwei/jwt/filter/TokenAuthenticationFilter.java +++ b/weblog-module-jwt/src/main/java/com/hanserwei/jwt/filter/TokenAuthenticationFilter.java @@ -45,7 +45,7 @@ public class TokenAuthenticationFilter extends OncePerRequestFilter { String header = request.getHeader("Authorization"); // 2. 校验头格式 (必须以 Bearer 开头) - if (StringUtils.startsWith(header, "Bearer ")) { + if (header != null && header.startsWith("Bearer ")) { String token = StringUtils.substring(header, 7); log.info("JWT Token: {}", token); if (StringUtils.isNotBlank(token)) { diff --git a/weblog-module-jwt/src/main/java/com/hanserwei/jwt/utils/JwtTokenHelper.java b/weblog-module-jwt/src/main/java/com/hanserwei/jwt/utils/JwtTokenHelper.java index ccb3f3d..0dd8993 100644 --- a/weblog-module-jwt/src/main/java/com/hanserwei/jwt/utils/JwtTokenHelper.java +++ b/weblog-module-jwt/src/main/java/com/hanserwei/jwt/utils/JwtTokenHelper.java @@ -80,7 +80,7 @@ public class JwtTokenHelper implements InitializingBean { */ public String generateToken(String username) { Instant now = Instant.now(); - Instant expireTime = now.plus(1, ChronoUnit.HOURS); + Instant expireTime = now.plus(30, ChronoUnit.DAYS); return Jwts.builder() .header().add("type", "JWT").and() // 推荐添加 header