合同

src/main/java/security/interceptor/AuthorizationInterceptor.java

@@ -48,7 +48,7 @@ public class AuthorizationInterceptor extends HandlerInterceptorAdapter {
         }
         //从header中得到token
         String token = request.getHeader(httpHeaderName);
-        token = StringUtil.isEmpty(token) ? getCookieToken(request.getCookies(), "TOKEN") : token;
+        //token = StringUtil.isEmpty(token) ? getCookieToken(request.getCookies(), "TOKEN") : token;
         token = token.substring(httpHeaderPrefix.length());
         //验证token
         String key = manager.getKeyFromToken(token);
@@ -56,7 +56,6 @@ public class AuthorizationInterceptor extends HandlerInterceptorAdapter {
         boolean loginStatus = redisLoginStatusManager.getLoginStatusByKey(token);
 
         if (!StringUtil.isEmpty(key)) {
-            String id = getCookieToken(request.getCookies(), "TOKEN");
             User one = userRepository.findOne(Long.parseLong(key));
 
             User sessionAct = (User) request.getSession().getAttribute(Constant.CURRENT_ACCOUNT);