Method VerifyRefreshToken

utils/jwt/jwt.go:250–274

VerifyRefreshToken 验证refresh token

(ctx *gin.Context, token string)

// VerifyRefreshToken 验证refresh token
func (h *handler) VerifyRefreshToken(ctx *gin.Context, token string) (bool, *RefreshClaims, error) {
	// 解析refresh token
	refreshClaims := &RefreshClaims{}
	refreshToken, err := jwt.ParseWithClaims(token, refreshClaims, func(token *jwt.Token) (interface{}, error) {
		return h.key2, nil
	})

	// 检查解析和验证结果
	if err != nil || !refreshToken.Valid {
		return false, nil, errors.New("无效的refresh token")
	}

	// 检查token是否在黑名单中
	exists, err := h.client.Exists(ctx, fmt.Sprintf("linkme:user:ssid:%s", refreshClaims.Ssid)).Result()
	if err != nil {
		return false, nil, fmt.Errorf("检查token状态失败: %v", err)
	}

	// 如果token在黑名单中,说明已经失效
	if exists > 0 {
		return false, nil, errors.New("refresh token已失效")
	}

	return true, refreshClaims, nil
}