jwt基本使用

java-jwt

依赖

<!--JWT-->
<dependency>
    <groupId>com.auth0</groupId>
    <artifactId>java-jwt</artifactId>
    <version>3.19.1</version>
</dependency>

加密

   // 密钥
    private static final String KEY = "Abc";
    // 过期时间5分钟
    private static final long EXPIRE_TIME = 5 * 60 * 1000;

    /**
     * 加密
     */
    @Test
    public void encrypt() {
        UserPO po = new UserPO();
        po.setId("1");
        po.setName("张三");
        po.setPassword("123");

        String token = JWT.create()
                // head部分
                .withHeader(new HashMap<>())
                // 过期时间
                .withExpiresAt(new Date(System.currentTimeMillis() + EXPIRE_TIME))
                // 用户数据
                .withClaim("id", po.getId())
                .withClaim("name", po.getName())
                .withClaim("pwd", po.getPassword())
                // 算法和密钥
                .sign(Algorithm.HMAC256(KEY));
        System.out.println(token);
    }

解密

    /**
     * 解密
     */
    @Test
    public void decrypt() {
        String token = "eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJuYW1lIjoi5byg5LiJIiwiaWQiOiIxIiwiZXhwIjoxNjUyMDAwMjc5LCJwd2QiOiIxMjMifQ.gVXChhj-8fScFxLtGqjBXY-K71kIYmPVB6g3TcHT7As";

        JWTVerifier jwtVerifier = JWT.require(Algorithm.HMAC256(KEY)).build();
        // 核实token
        DecodedJWT decodedJWT = jwtVerifier.verify(token);
        // 获取过期时间
        decodedJWT.getExpiresAt();
        // 获取用户数据
        String name = decodedJWT.getClaim("name").asString();
        System.out.println(name);
    }

jjwt

依赖

<!--0.10以后版本需要引入更多依赖-->
<dependency>
    <groupId>io.jsonwebtoken</groupId>
    <artifactId>jjwt</artifactId>
    <version>0.9.1</version>
</dependency>

加密

    // 密钥长度不能太短
    private static final String KEY = "Abc1234567";
    // 过期时间5分钟
    private static final long EXPIRE_TIME = 5 * 60 * 1000;


    /**
     * 加密
     */
    @Test
    public void encrypt() {
        String token = Jwts.builder()
                // head
                .setHeaderParam("typ", "JWT")
                .setHeaderParam("alg", "HS256")
                // 数据
                .setSubject("baobao-user")
                .setIssuedAt(new Date(System.currentTimeMillis() + EXPIRE_TIME))
                .setExpiration(new Date(System.currentTimeMillis() + EXPIRE_TIME))
                .claim("id", "1")
                .claim("nickname", "张三")
                // 算法+密钥
                .signWith(SignatureAlgorithm.HS256, KEY)
                // 拼接
                .compact();
        System.out.println(token);
    }

解密

 	/**
     * 解密
     */
    @Test
    public void decrypt() {
        String token="eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJiYW9iYW8tdXNlciIsImlhdCI6MTY1MjAwNDkyNCwiZXhwIjoxNjUyMDA0OTI0LCJpZCI6IjEiLCJuaWNrbmFtZSI6IuW8oOS4iSJ9.89fRjIUSWkMrZW2mTtxT3HXpSH5M1_liher4D18dRko";
        JwtParser parser = Jwts.parser();
        // 装载密钥
        Jws<Claims> jws = parser.setSigningKey(KEY).parseClaimsJws(token);
        Claims claims = jws.getBody();
        // 获取请求体数据
        Object id = claims.get("nickname");
        System.out.println(id);
    }