对话、重新生成、评价完成

schoolNewsServ/auth/src/main/java/org/xyzh/auth/filter/JwtAuthenticationFilter.java

@@ -104,16 +104,34 @@ public class JwtAuthenticationFilter extends OncePerRequestFilter {
 
     /**
      * @description    从请求中获取Token
+     * 支持以下方式获取Token：
+     * 1. Header中的Authorization: Bearer {token}
+     * 2. URL参数中的token: ?token={token}
+     * 3. URL参数中的access_token: ?access_token={token}
      * @param    request HTTP请求
      * @return    String Token
      * @author    yslg
      * @since 2025-09-28
      */
     private String getTokenFromRequest(HttpServletRequest request) {
+        // 1. 优先从Header中获取Token
         String bearerToken = request.getHeader("Authorization");
         if (StringUtils.hasText(bearerToken) && bearerToken.startsWith("Bearer ")) {
             return bearerToken.substring(7);
         }
+        
+        // 2. 从URL参数token中获取
+        String token = request.getParameter("token");
+        if (StringUtils.hasText(token)) {
+            return token;
+        }
+        
+        // 3. 从URL参数access_token中获取
+        String accessToken = request.getParameter("access_token");
+        if (StringUtils.hasText(accessToken)) {
+            return accessToken;
+        }
+        
         return null;
     }