spring提供的JwtHelper生成JWT令牌原理，使用RSA签名算法

生成令牌

//生成一个jwt令牌 
@Test public void testCreateJwt(){ 
	//证书文件 
	String key_location = "xc.keystore"; 
	//密钥库密码 
	String keystore_password = "xuechengkeystore"; 
	//访问证书路径 
	ClassPathResource resource = new ClassPathResource(key_location); 
	//密钥工厂 
	KeyStoreKeyFactory keyStoreKeyFactory = new KeyStoreKeyFactory(resource, keystore_password.toCharArray()); 
	//密钥的密码，此密码和别名要匹配
	String keypassword = "xuecheng"; 
	//密钥别名 
	String alias = "xckey"; 
	//密钥对（密钥和公钥） 
	KeyPair keyPair = keyStoreKeyFactory.getKeyPair(alias,keypassword.toCharArray()); 
	//私钥 
	RSAPrivateKey aPrivate = (RSAPrivateKey) keyPair.getPrivate(); 
	//定义payload信息 
	Map<String, Object> tokenMap = new HashMap<>(); 
	tokenMap.put("id", "123"); 
	tokenMap.put("name", "mrt"); 
	tokenMap.put("roles", "r01,r02"); 
	tokenMap.put("ext", "1"); 
	//生成jwt令牌 
	Jwt jwt = JwtHelper.encode(JSON.toJSONString(tokenMap), new RsaSigner(aPrivate)); 
	//取出jwt令牌 
	String token = jwt.getEncoded(); 
	System.out.println("token="+token); 
}

校验令牌

@Test 
public void testVerify(){ 
	//jwt令牌 
	String token ="eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJleHQiOiIxIiwicm9sZXMiOiJyMDEscjAyIiwibmFtZSI6Im1ydCIsI mlkIjoiMTIzIn0.KK7_67N5d1Dthd1PgDHMsbi0UlmjGRcm_XJUUwseJ2eZyJJWoPP2IcEZgAU3tUaaKEHUf9wSRwaDgwhrw fyIcSHbs8oy3zOQEL8j5AOjzBBs7vnRmB7DbSaQD7eJiQVJOXO1QpdmEFgjhc_IBCVTJCVWgZw60IEW1_Lg5tqaLvCiIl26K 48pJB5f‐le2zgYMzqR1L2LyTFkq39rG57VOqqSCi3dapsZQd4ctq95SJCXgGdrUDWtD52rp5o6_0uq‐ mrbRdRxkrQfsa1j8C5IW2‐T4eUmiN3f9wF9JxUK1__XC1OQkOn‐ZTBCdqwWIygDFbU7sf6KzfHJTm5vfjp6NIA"; 
	//公钥 
	String publickey = "‐‐‐‐‐BEGIN PUBLIC KEY‐‐‐‐‐ MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijyxMdq4S6L1Af1rtB8SjCZHNgsQG8JTfGy55eYvzG0B/E4AudR2 prSRBvF7NYPL47scRCNPgLnvbQczBHbBug6uOr78qnWsYxHlW6Aa5dI5NsmOD4DLtSw8eX0hFyK5Fj6ScYOSFBz9cd1nNTvx 2+oIv0lJDcpQdQhsfgsEr1ntvWterZt/8r7xNN83gHYuZ6TM5MYvjQNBc5qC7Krs9wM7UoQuL+s0X6RlOib7/mcLn/lFLsLD dYQAZkSDx/6+t+1oHdMarChIPYT1sx9Dwj2j2mvFNDTKKKKAq0cv14Vrhz67Vjmz2yMJePDqUi0JYS2r0iIo7n8vN7s83v5u OQIDAQAB‐‐‐‐‐END PUBLIC KEY‐‐‐‐‐"; 
	//校验
	jwt Jwt jwt = JwtHelper.decodeAndVerify(token, new RsaVerifier(publickey));
	//获取jwt原始内容 
	String claims = jwt.getClaims(); 
	//jwt令牌 
	String encoded = jwt.getEncoded(); 
	System.out.println(encoded); 
}

校验成功返回claims中封装的json串，校验失败抛出异常；