在服务器自动更新令牌的上下文中,我正在努力解决基础知识:从响应中获取标头数据。
它似乎与 CORS 无关,因为我的 Node/express 允许 Authorization/x-access-token 并相应地响应(请参见下面的网络选项卡屏幕截图)。
我希望看到工作的第一步就是简单地从响应中读取标题。查看我的代码,它是文档中找到的样板。获取“Content-Length”的事件返回 null。
auth-service.ts
login(username:string, password:string):Observable<boolean>{
this.loggedIn = false;
return new Observable( (observer:Observer<boolean>) => {
const body = {user: username, pwd: password};
const url = this.config.API_ENDPOINT_PUBLIC_AUTH;
this.httpClient.post(url, body, {
responseType: 'text',
observe: "response"
}).first().subscribe(
(response:HttpResponse<string>) => {
// DEBUG
console.log(response.headers.get('Authorization'));
console.log(response.headers.get('X-Test-Header'));
console.log(response.headers.get('Content-length'));
this.token = response.headers.get('Authorization');
this.storeToken(this.token);
this.currentUser = username;
this.loggedIn = true;
this.authChanged$.next('auth');
observer.next(true);
},
(err) => observer.next(false),
() => {},
);
});
}
控制台输出:
null
null
null
将其与此请求的网络选项卡的内容进行比较:
不用说,我的 HttpInterceptor 也不起作用 - 在响应中提供“Authorization”标头后,它会使用该值作为新令牌。这是为了实现令牌的自动更新:
令牌拦截器.ts
intercept(request: HttpRequest<any>, next: HttpHandler): Observable<HttpEvent<any>> {
const authService = this.injector.get(AuthService);
const token = authService.getToken();
if(token){
request = request.clone({
setHeaders: { 'x-access-token' : token }
});
}
return next.handle(request).do(
(event: HttpEvent<any>) => {
if (event instanceof HttpResponse) {
const response:HttpResponse<any> = (<HttpResponse<any>> event);
const authorizationHeader = response.headers.get('Authorization');
console.log('Authorization header value: ' + authorizationHeader);
if(authorizationHeader){
authService.setToken(authorizationHeader);
}
}
},
(err: any) => {
if (err instanceof HttpErrorResponse){
if (err.status === 401) {
this.router.navigate(['/']);
}
}
});
}