成功刷新令牌请求后,OkHttp Authenticator循环

J.f*_*.fr 1 android kotlin okhttp retrofit2 okhttp3

我实现了okhttp3.Authenticator与Retrofit 2一起扩展的类,用于处理android应用程序中的401错误。它应该调用refreshToken request,然后如果成功,则使用新的访问令牌重新调用所需的请求。问题是成功获取刷新令牌后,我的TokenAuthenticator...会一次又一次刷新令牌,直到达到某个限制。你有什么线索吗?

TokenAuthenticator类:

class TokenAuthenticator : Authenticator {

    private val notLoggedResponseCode = 401
    private val successResponseCode = 200
    private val refreshTokenGrantType = "refresh_token"

    override fun authenticate(route: Route?, response: okhttp3.Response?): Request? {

        if (response?.code() == notLoggedResponseCode) {

            val refreshTokenResponse: Response<Authorization> = RestController
                    .getInstance()
                    .basicRetrofit
                    .create(AuthRepository::class.java)
                    .refreshToken(
                            Credentials.basic(BuildConfig.CLIENT_ID, BuildConfig.CLIENT_SECRET),
                            refreshTokenGrantType,
                            UserSession.getInstance().authorization?.refreshToken!!)
                    .execute()



            return if (refreshTokenResponse.code() == successResponseCode) {
                UserSession.getInstance().authorization = refreshTokenResponse.body() //updating token
                UserSession.getInstance().saveAuthorizationData()

                // Every time flow is here, so new access token is obtained.
                // But somehow it starts refresh procedure again... 
                response
                        .request()
                        .newBuilder()
                        .build()
            } else {
                null
            }
        } else {
            return null
        }
    }
}
Run Code Online (Sandbox Code Playgroud)

初始化OkHttp客户端以进行改造的方法:

    private fun initBaseOkHttpClientBuilder(): OkHttpClient.Builder {
        val logging = HttpLoggingInterceptor().apply {
            this.level = HttpLoggingInterceptor.Level.BODY
        }

        return OkHttpClient.Builder()
                .connectTimeout(connectionTimeout, TimeUnit.SECONDS)
                .readTimeout(connectionTimeout, TimeUnit.SECONDS)
                .writeTimeout(connectionTimeout, TimeUnit.SECONDS)
                .addInterceptor(logging)
                .authenticator(TokenAuthenticator())
                .addInterceptor(OAuth2Interceptor())
    }
Run Code Online (Sandbox Code Playgroud)

kar*_*ngh 6

获取刷新令牌后,需要将其传递到标头中的新请求。就像是response.request().newBuilder().header("Authorization", "bearer " + bearer).build()

  • 给这个人一个诺贝尔奖!它终于起作用了。我正在尝试同样的事情,但是使用 .addHeader() 方法,但没有帮助。但是 header() 就像一个魅力。谢谢你。 (2认同)