优化

internal/biz/authentication.go

@@ -40,6 +40,11 @@ type AuthenticationResult struct {
 	NeedChangePassword bool
 }
 
+type TokenAuthentication struct {
+	Claims    *AuthClaims
+	Refreshed *IssuedToken
+}
+
 type AuthenticationUsecase struct {
 	users    *UserUsecase
 	security *SecurityUsecase
@@ -148,3 +153,28 @@ func (uc *AuthenticationUsecase) SwitchAuthority(ctx context.Context, userID, au
 	}
 	return &AuthenticationResult{User: user, Token: issued.Value, ExpiresAt: issued.ExpiresAt, NeedChangePassword: user.MustChangePassword}, nil
 }
+
+func (uc *AuthenticationUsecase) AuthenticateToken(ctx context.Context, token string) (*TokenAuthentication, error) {
+	claims, err := uc.issuer.ParseToken(token)
+	if err != nil {
+		return nil, err
+	}
+	disabled, err := uc.security.tokens.IsTokenDisabled(ctx, token)
+	if err != nil || disabled {
+		return nil, ErrTokenDisabled
+	}
+	result := &TokenAuthentication{Claims: claims}
+	if claims.BufferTime <= 0 || time.Until(claims.ExpiresAt) >= claims.BufferTime {
+		return result, nil
+	}
+	user := &User{ID: claims.ID, UUID: claims.UUID, Username: claims.Username, NickName: claims.NickName, AuthorityID: claims.AuthorityID, MustChangePassword: claims.MustChangePwd}
+	issued, err := uc.issuer.IssueToken(user, claims.AuthorityID, claims.MustChangePwd, 0)
+	if err != nil {
+		return result, nil
+	}
+	if err = uc.security.RotateActiveToken(ctx, claims.Username, token, issued.Value, issued.TTL); err != nil {
+		return result, nil
+	}
+	result.Refreshed = issued
+	return result, nil
+}