fix(auth): 增加 JWT 安全版本号与 TokenManager.invalidateUserSessions,统一角色与密码变更的按用户下线行为
Closes #ID8B31
This commit is contained in:
@@ -35,4 +35,9 @@ public interface JwtClaimConstants {
|
||||
*/
|
||||
String AUTHORITIES = "authorities";
|
||||
|
||||
/**
|
||||
* 安全版本号,用于按用户失效历史令牌
|
||||
*/
|
||||
String SECURITY_VERSION = "securityVersion";
|
||||
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user