具有Alamofire下载功能的JWT身份验证

时间:2018-12-13 15:23:47

标签: ios swift jwt alamofire express-jwt

感谢Alamofire,我正在尝试使用JWT令牌认证下载zip文件并将其从服务器保存。在没有令牌认证的情况下,下载效果很好,成功保存了文件。激活服务器端身份验证(将Passport.js与NodeJS结合使用)时,我总是收到401。我使用sessionManager适配器功能将令牌附加到标头。其他请求(发布,使用sessionManager.request(..)获取)在此身份验证机制下效果很好。

问题是:我们可以修改Alamofire下载功能的标题吗?如果是,怎么办?

任何建议都赞赏

func getZip(){

    let sessionManager = Alamofire.SessionManager.default
    let authHandler = JWTAccessTokenAdapter(accessToken: Auth.getAccessToken())

    sessionManager.retrier = authHandler
    sessionManager.adapter = authHandler


    let downloadUrl: String = Auth.getApiEndpoint() + "get_zip"
    let destinationPath: DownloadRequest.DownloadFileDestination = { _, _ in
        let documentsURL = FileManager.default.urls(for: .documentDirectory, in: .userDomainMask)[0];
        let fileURL = documentsURL.appendingPathComponent("myZip.zip")
        return (fileURL, [.removePreviousFile, .createIntermediateDirectories])
    }


    sessionManager.download(downloadUrl, method: .get,  encoding: URLEncoding.httpBody, to: destinationPath)
        .downloadProgress { progress in
            print(">> Zip Download Progress: \(progress.fractionCompleted)")
        }
        .responseData { response in
            switch response.result{
            case .success:
                if response.destinationURL != nil, let filePath = response.destinationURL?.absoluteString {
                    print("success & filepath : \(filePath)")
                    completionHandler(filePath, true)
                }
                break
            case .failure:
                print("faillure")
                completionHandler("", false)
                break
            }

        }
    } 
}

JWT适配器:

class JWTAccessTokenAdapter: RequestAdapter {

     typealias JWT = String
     private var accessToken: JWT

     func adapt(_ urlRequest: URLRequest) throws -> URLRequest {
        var urlRequest = urlRequest

        if let urlString = urlRequest.url?.absoluteString, urlString.hasPrefix(Auth.getApiEndpoint()) {
        /// Set the Authorization header value using the access token.
           urlRequest.setValue(accessToken, forHTTPHeaderField: "Authorization")
        }

    return urlRequest

   }
}

输出:

response: SUCCESS: 12 bytes // (Unauthorized) -> Corrupted zip file

1 个答案:

答案 0 :(得分:2)

在您的请求链中没有validation步骤,所有响应都将被视为成功。因此,请检查您的响应代码(或仅在.validate()之前添加responseData),以查看您的请求是否成功。另外,尽管您似乎没有发送任何参数,但您可能要仔细检查参数编码。