thinkphp5 基于JWT访问令牌token 刷新令牌token验证

common.php

<?php

use Firebase\JWT\JWT;
/**
 * 应用公共（函数）文件
 */

// +---------------------------------------------------------------------+
// | 系统相关函数
// +---------------------------------------------------------------------+

/**
 * 生成会员token
 * @param unknown $userId
 * @param unknown $expire
 * @return string
 */
function create_jwt_by_userid($userId,$expire){
    //jwt的签发密钥，验证token的时候需要用到
    $key = md5('*********');
    $time = time(); //签发时间
    $expire = $time + $expire; //过期时间
    $token = array(
        "user_id" => $userId,
        "iss" => "https://199508.com",//签发组织
        "aud" => "https://199508.com", //签发作者
        "iat" => $time,
        "nbf" => $time,
        "exp" => $expire
    );
    $jwt = JWT::encode($token, $key);
    return $jwt;
}

/**************************************************************************************/

<?php
namespace app\tollcollector\controller;
header("Access-Control-Allow-Origin: *");
header("Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization");
header('Access-Control-Allow-Methods: GET,POST,PUT,DELETE,OPTIONS,PATCH');

use think\Controller;
use Firebase\JWT\JWT;

/**
 * 公共控制器
 * @author 
 *
 */
class Common extends Controller
{   
    protected $userId = '';
    protected $usertoken = [];
    public function _initialize(){
        if(!$this->request->param('access_token') && $this->request->param('refresh_token')){
            $this->returnJson('100101','会员信息错误','','');
        }
        
        $access_token = $this->request->param('access_token');
        $refresh_token = $this->request->param('refresh_token');
        $access_token = $this->verifyJwt($access_token);
        if($access_token['code'] == 10000){
            $this->userId = $access_token['result'];
        }elseif($access_token['code'] == 10001){
            $this->returnJson('100101','会员信息错误','','');
        }elseif($access_token['code'] == 10002){
            $this->returnJson('100102','令牌失效','','');
        }elseif($access_token['code'] == 10003){
            //令牌过期
            //验证刷新令牌
            $refresh_token = $this->verifyJwt($refresh_token);
            if($refresh_token['code'] == 10000){
                $this->userId = $refresh_token['result'];
                //重新生成令牌
                $this->usertoken['access_token'] = create_jwt_by_userid($refresh_token['result'],3600*24);
                $this->usertoken['refresh_token'] = create_jwt_by_userid($refresh_token['result'],3600*24*7);
            }elseif($access_token['code'] == 10001){
                $this->returnJson('100101','会员信息错误','','');
            }elseif($access_token['code'] == 10002){
                $this->returnJson('100102','令牌失效','','');
            }elseif($access_token['code'] == 10003){
                $this->returnJson('100103','令牌过期','','');
            }
        }
    }
    
    /**
     * @author 
     * 校验会员token
     */
    protected function verifyJwt($jwt)
    {
        //jwt的签发密钥，验证token的时候需要用到
        $key = md5('*********');
        try {
            $jwtAuth = json_encode(JWT::decode($jwt, $key, array('HS256')));
            $authInfo = json_decode($jwtAuth, true);
            if (!empty($authInfo['user_id'])) {
                return array(
                    'code' => '10000',
                    'msg' => '令牌验证通过',
                    'result'=>$authInfo['user_id']
                );
            } else {
                return array(
                    'code' => '10001',
                    'msg' => '会员信息错误',
                    'result'=>''
                );
            }
        } catch (\Firebase\JWT\SignatureInvalidException $e) {
            return array(
                'code' => '10002',
                'msg' => '令牌失效',
                'result'=>''
            );
        } catch (\Firebase\JWT\ExpiredException $e) {
            return array(
                'code' => '10003',
                'msg' => '令牌过期',
                'result'=>''
            );
        } catch (\Exception $e) {
            return array(
                'code' => '10002',
                'msg' => '令牌验证失败',
                'result'=>''
            );
        }
    }
    
    protected function returnJson($code='100000',$msg='请求成功',$result='',$usertoken=''){
        exit(json_encode([
            'code' => $code,
            'msg' => $msg,
            'result'=>$result,
            'usertoken' =>$usertoken
        ]));
    }
}

/***************************************************************************/

<?php
namespace app\tollcollector\controller;
header("Access-Control-Allow-Origin: *");
header("Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization");
header('Access-Control-Allow-Methods: GET,POST,PUT,DELETE,OPTIONS,PATCH');

use think\Controller;

/**
 * 登录控制器
 * @author 
 *
 */
class Login extends Controller
{
    /**
     * 登录接口
     * username 账号 
     * password 密码 
     */
    public function login()
    {
        if ($this->request->isPost()) {
            $data = $this->request->param();
            if (empty($data['username']) || empty($data['password'])) {
                $this->returnJson('100001','账号或密码不能为空','','');
            }
            $snb_year = date('Y');
            $userInfo = db('***************')
            ->where('account', $data['username'])
            ->find();
            if (! $userInfo) {
                $this->returnJson('100002','账号输入错误','','');
            }
            if ($userInfo['password'] != md5($data['password'])) {
                $this->returnJson('100003','密码输入错误','','');
            }
            //access_token：请求接口的token
            //refresh_token：刷新access_token
            $usertoken['access_token'] = create_jwt_by_userid($userInfo['snb_id'],3600*24);
            $usertoken['refresh_token'] = create_jwt_by_userid($userInfo['snb_id'],3600*24*7);
            $this->returnJson('100000','登录成功','',$usertoken);
        } else {
            $this->returnJson('100005','登录失败','','');
        }       
    }
    
    protected function returnJson($code='100000',$msg='请求成功',$result='',$usertoken=''){
        exit(json_encode([
            'code' => $code,
            'msg' => $msg,
            'result'=>$result,
            'usertoken' =>$usertoken
        ]));
    }
}

/*********************************************************************/

<?php
namespace app\tollcollector\controller;

/**
 * 首页控制器
 * @author 
 *
 */
class Index extends Common
{
    /**
     * 信息接口
     */
    public function index(){
        $userInfo = db('**************')->where('id', $this->userId)->find();
        unset($userInfo['snb_password']);
        $this->returnJson('100000','请求成功',$userInfo,$this->usertoken);
    }
 
    
    
}