JWT 笔记

JWT 比session更好的分布式前后端认证方案

JWT_java

  <!--引入jwt依赖-->
        <dependency>
            <groupId>com.auth0</groupId>
            <artifactId>java-jwt</artifactId>
            <version>3.10.3</version>
        </dependency>

class SpringbootJwtApplicationTests {

    @Test
    void contextLoads() {

        Calendar instance = Calendar.getInstance();
        instance.add(Calendar.SECOND,200);

        String token = JWT.create()
//                .withHeader(map)//默认
                .withClaim("userId", 12)//payload
                .withClaim("userName", "hello")//payload
                .withExpiresAt(instance.getTime())//指定令牌过期时间
                .sign(Algorithm.HMAC256("!QW@#C2"));//签名
        System.out.println(token);
    }
    @Test
    public void test(){
        //创建验证对象
        JWTVerifier jwtVerifier = JWT.require(Algorithm.HMAC256("!QW@#C2")).build();

        DecodedJWT verify = jwtVerifier.verify("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ1c2VyTmFtZSI6ImhlbGxvIiwiZXhwIjoxNjAxMDg5OTU2LCJ1c2VySWQiOjEyfQ.Npk4nU1bCvd9uRf4_7SCQ8VjklkWXERB6x349-bmebA");

        System.out.println(verify.getClaim("userId").asInt());
        System.out.println(verify.getClaim("userName").asString());
        System.out.println(verify.getExpiresAt());//过期时间
    }

}

JWT封装 (JWTUtils)

package com.ll.springboot_jwt.utils;

import com.auth0.jwt.JWT;
import com.auth0.jwt.JWTCreator;
import com.auth0.jwt.algorithms.Algorithm;
import com.auth0.jwt.interfaces.DecodedJWT;

import java.util.Calendar;
import java.util.Map;

public class JWTUtils {

    private static final String SING = "!QW@#C266YX33";//签名


    /**
     * 生成token header.payload.sing
     */
    public static String getToken(Map<String,String> map){

        Calendar instance = Calendar.getInstance();
        instance.add(Calendar.DATE,7);//默认七天过期

        JWTCreator.Builder builder = JWT.create();

        //payload
        map.forEach((k,v)->{
            builder.withClaim(k,v);
        });

        //sign
        String token = builder.withExpiresAt(instance.getTime())
                .sign(Algorithm.HMAC256(SING));

        return token;
    }


    /**
     * 验证token 合法性
     */
    public static DecodedJWT verify(String token){
       return JWT.require(Algorithm.HMAC256(SING)).build().verify(token);
    }

//    /**
//     * 获取token信息
//     */
//    public static DecodedJWT getTokenInfo(String token){
//        DecodedJWT verify = JWT.require(Algorithm.HMAC256(SING)).build().verify(token);
//        return verify;
//    }
}