苹果授权登陆 服务端验证(java)

需要的jar包：

jose4j-0.6.4.jar；jwks-rsa-0.9.0.jar；jjwt-0.9.1.jar；

jar包下载地址：https://download.csdn.net/download/loveLF1314/12270178

 

 

package com.cctin.platform.util;

import io.jsonwebtoken.Claims;
import io.jsonwebtoken.ExpiredJwtException;
import io.jsonwebtoken.Jws;
import io.jsonwebtoken.JwtParser;
import io.jsonwebtoken.Jwts;

import java.security.PublicKey;
import java.util.Base64;
import java.util.List;
import java.util.Map;

import org.jose4j.jws.JsonWebSignature;
import org.jose4j.lang.JoseException;
import org.springframework.http.HttpStatus;
import org.springframework.http.ResponseEntity;
import org.springframework.util.StringUtils;
import org.springframework.web.client.RestTemplate;

import com.alibaba.fastjson.JSON;
import com.auth0.jwk.InvalidPublicKeyException;
import com.auth0.jwk.Jwk;

public class JwtUtils {

    private static String getAppleIdPublicKeyFromRemote() {

        ResponseEntity<String> responseEntity = new RestTemplate().getForEntity("https://appleid.apple.com/auth/keys", String.class);
        if (responseEntity == null || responseEntity.getStatusCode() != HttpStatus.OK) {
            return null;
        }
        return responseEntity.getBody();
    }

    private static PublicKey getAppleIdPublicKey(String kid) {
        String publicKeyStr = getAppleIdPublicKeyFromRemote();
        return publicKeyAdapter(publicKeyStr, kid);
    }

    /**
     * 将appleServer返回的publicKey转换成PublicKey对象
     * 
     * @param publicKeyStr
     * @return
     */
    private static PublicKey publicKeyAdapter(String publicKeyStr, String kid) {
        if (!StringUtils