通过拦截器刷新服务器令牌时,OkHttp 请求泄漏



我使用RxJava和Retrofit来执行OkHttp请求。我可以在Android Studio的网络分析器中看到我的请求被泄露了,因为它们使AsyncTask线程保持活动状态。对它们没有响应,它们的大小为空。我可以在网络探查器的线程视图中看到原始请求、令牌请求、更新的请求。但原始请求从未完成。

极端情况下,例如在 QA 环境中,由于某种原因,令牌每分钟刷新一次,线程池已满,无法再进行调用。我认为我们可以根据需要多次调用chain.continue,但我认为错误仍然存在。这是拦截器代码:

private static okhttp3.Interceptor oauthInterceptor = chain -> {
    OAuthToken token = OAuthToken.getOAuthToken();
    long initialTokenCreated = token.getCreatedUtc();
    Request request = changeTokenInRequest(chain.request(), token);
    Response response = chain.proceed(request);
    boolean forceTokenRefresh = false;
    if (initialTokenCreated != token.getCreatedUtc()) {
        // Then the token has been updated since we started this request
        request = changeTokenInRequest(chain.request(), token);
        response = chain.proceed(request);
    }
    String jsonType = "application/json";
    if (!response.body().contentType().toString().contains(jsonType)) {
        forceTokenRefresh = true;
    }
    // 401: Forbidden, 403: Permission denied
    if (forceTokenRefresh || ((response.code() == 401 || response.code() == 403)
            && OAuthToken.getOAuthToken().getRefreshToken() != null)) {
        OAuthToken refreshedToken = refreshToken();
        if (refreshedToken == null) {
            // Then there was a problem refreshing the token
            return response;
        }
        // Recreate the request with the new access token
        request = changeTokenInRequest(chain.request(), refreshedToken);
        return chain.proceed(request);
    } else {
        return response;
    }
};
protected static okhttp3.Request changeTokenInRequest(Request request, OAuthTokenBase token) {
    Headers.Builder builder = request.headers().newBuilder().removeAll("Authorization");
    if (!TextUtils.isEmpty(token.getTokenType()) && !TextUtils.isEmpty(token.getAccessToken())) {
        builder = builder.add("Authorization", token.getTokenType() + " " + token.getAccessToken());
    }
    request = request.newBuilder().headers(builder.build()).build();
    return request;
}

这就是我打电话的方式:

public static Observable<ResultPaginatedReply<BasicUser>> getGroupsMembers(String type, String id, int page) {
    return getMsApiService().getGroupsMembers(type, id, page)
            .subscribeOn(Schedulers.from(AsyncTask.THREAD_POOL_EXECUTOR))
            .observeOn(AndroidSchedulers.mainThread());
}

事实证明,如果您不像我在这里那样在 OkHttp 中使用身份验证器类,则必须在刷新令牌时手动关闭响应正文。 @DallinDyer的评论在这里帮助了我。

所以我补充说

            response.body().close();

经过错误检查,瞧。

最新更新