biss
5ec62a03ca
Web：访问令牌 10 分钟；活跃时自动轮换刷新令牌；连续无操作 30 分钟后清除登录并跳转登录页。 App：会话窗口 3 天；打开 App、恢复前台或请求接口时自动刷新并重新顺延 3 天。 普通登录和 SSO 使用同一策略。 刷新令牌只以 SHA-256 摘要入库，每次刷新都会轮换，旧令牌无法再次使用；退出登录会吊销刷新令牌。 网络临时故障不会误清登录状态，多标签页同时刷新也做了竞争处理。
61 lines
2.6 KiB
C#
61 lines
2.6 KiB
C#
using System;
|
|
using Microsoft.EntityFrameworkCore.Migrations;
|
|
|
|
#nullable disable
|
|
|
|
namespace Jiaowu.Api.Infrastructure.Persistence.Migrations.MySql
|
|
{
|
|
/// <inheritdoc />
|
|
public partial class RefreshSessions : Migration
|
|
{
|
|
/// <inheritdoc />
|
|
protected override void Up(MigrationBuilder migrationBuilder)
|
|
{
|
|
migrationBuilder.CreateTable(
|
|
name: "RefreshSessions",
|
|
columns: table => new
|
|
{
|
|
Id = table.Column<Guid>(type: "char(36)", nullable: false),
|
|
UserId = table.Column<Guid>(type: "char(36)", nullable: false),
|
|
TokenHash = table.Column<string>(type: "varchar(64)", maxLength: 64, nullable: false),
|
|
ClientType = table.Column<string>(type: "varchar(20)", maxLength: 20, nullable: false),
|
|
SecurityStamp = table.Column<string>(type: "varchar(100)", maxLength: 100, nullable: false),
|
|
ExpiresAt = table.Column<DateTime>(type: "datetime(6)", nullable: false),
|
|
CreatedAt = table.Column<DateTime>(type: "datetime(6)", nullable: false),
|
|
LastRefreshedAt = table.Column<DateTime>(type: "datetime(6)", nullable: false),
|
|
RevokedAt = table.Column<DateTime>(type: "datetime(6)", nullable: true),
|
|
ReplacedBySessionId = table.Column<Guid>(type: "char(36)", nullable: true)
|
|
},
|
|
constraints: table =>
|
|
{
|
|
table.PrimaryKey("PK_RefreshSessions", x => x.Id);
|
|
table.ForeignKey(
|
|
name: "FK_RefreshSessions_AspNetUsers_UserId",
|
|
column: x => x.UserId,
|
|
principalTable: "AspNetUsers",
|
|
principalColumn: "Id",
|
|
onDelete: ReferentialAction.Cascade);
|
|
})
|
|
.Annotation("MySQL:Charset", "utf8mb4");
|
|
|
|
migrationBuilder.CreateIndex(
|
|
name: "IX_RefreshSessions_TokenHash",
|
|
table: "RefreshSessions",
|
|
column: "TokenHash",
|
|
unique: true);
|
|
|
|
migrationBuilder.CreateIndex(
|
|
name: "IX_RefreshSessions_UserId_ExpiresAt",
|
|
table: "RefreshSessions",
|
|
columns: new[] { "UserId", "ExpiresAt" });
|
|
}
|
|
|
|
/// <inheritdoc />
|
|
protected override void Down(MigrationBuilder migrationBuilder)
|
|
{
|
|
migrationBuilder.DropTable(
|
|
name: "RefreshSessions");
|
|
}
|
|
}
|
|
}
|