refactor: 优化mvc支持

hsweb-authorization/hsweb-authorization-basic/src/main/java/org/hswebframework/web/authorization/basic/web/WebUserTokenInterceptor.java

@@ -12,6 +12,8 @@ import jakarta.servlet.http.HttpServletRequest;
 import jakarta.servlet.http.HttpServletResponse;
 import org.springframework.web.servlet.HandlerInterceptor;
 
+import javax.annotation.Nonnull;
+import java.io.Closeable;
 import java.util.List;
 import java.util.Objects;
 import java.util.stream.Collectors;
@@ -23,6 +25,8 @@ import java.util.stream.Collectors;
  */
 public class WebUserTokenInterceptor implements HandlerInterceptor {
 
+    static final String TOKEN_ATTR = WebUserTokenInterceptor.class.getName() + ".token";
+
     private final UserTokenManager userTokenManager;
 
     private final List<UserTokenParser> userTokenParser;
@@ -84,14 +88,22 @@ public class WebUserTokenInterceptor implements HandlerInterceptor {
             }
             if (null != userToken) {
                 userTokenManager.touch(token).subscribe();
-                UserTokenHolder.setCurrent(userToken);
+                request.setAttribute(
+                    TOKEN_ATTR, UserTokenHolder.makeCurrent(userToken)
+                );
             }
         }
         return true;
     }
 
     @Override
-    public void afterCompletion(HttpServletRequest request, HttpServletResponse response, Object handler, Exception ex) throws Exception {
-        UserTokenHolder.setCurrent(null);
+    public void afterCompletion(HttpServletRequest request,
+                                @Nonnull HttpServletResponse response,
+                                @Nonnull Object handler,
+                                Exception ex) throws Exception {
+        Object closable = request.getAttribute(TOKEN_ATTR);
+        if (closable instanceof Closeable c) {
+            c.close();
+        }
     }
 }