Jwt令牌

使用jwt令牌可以存储用户的隐私信息,账号,密码等.用于保护登入的安全性

1.导入jwt坐标:

2.令牌测试:

package com.itheima.jwt;


import com.auth0.jwt.JWT;
import com.auth0.jwt.JWTVerifier;
import com.auth0.jwt.algorithms.Algorithm;
import com.auth0.jwt.interfaces.Claim;
import com.auth0.jwt.interfaces.DecodedJWT;
import org.junit.jupiter.api.Test;

import java.util.Date;
import java.util.HashMap;
import java.util.Map;

public class testGen {
   @Test
   public void TestGen(){
      HashMap<String, Object> claims = new HashMap<>();
      claims.put("id", 1);
      claims.put("username", "张三");
      //生成jwt的代码
      String token = JWT.create()
            .withClaim("user", claims)//添加载荷
            .withExpiresAt(new Date(System.currentTimeMillis() + 1000 * 60 * 60 * 12))//添加过期时间
            .sign(Algorithm.HMAC256("itheima"));//指定算法,配置秘钥
      System.out.println(token);


   }
@Test
   public void testParse(){
      //定义字符串,模拟用户传递过来的token
   String token = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9." +
         "eyJ1c2VyIjp7ImlkIjoxLCJ1c2VybmFtZSI6IuW8oOS4iSJ9LCJleHAiOjE3MTEzOTkyNzZ9." +
         "SaakfWuhiwoyPhqs2rcs12i6DcO0MspjMQQ4-3vL0To";

      //解析token,获取载荷
   JWTVerifier jwtVerifier = JWT.require(Algorithm.HMAC256("itheima")).build();
   DecodedJWT decodedJWT = jwtVerifier.verify(token);//验证token,生成一个解析后的JWT对象
   Map<String, Claim> claims = decodedJWT.getClaims();
   System.out.println(claims.get("user"));
}
}

编写jwt工具类

package com.itheima.utils;

import com.auth0.jwt.JWT;
import com.auth0.jwt.algorithms.Algorithm;

import java.util.Date;
import java.util.Map;

public class JwtUtil {

    private static final String KEY = "itheima";
   
   //接收业务数据,生成token并返回
    public static String genToken(Map<String, Object> claims) {
        return JWT.create()
                .withClaim("claims", claims)
                .withExpiresAt(new Date(System.currentTimeMillis() + 1000 * 60 * 60 * 12))
                .sign(Algorithm.HMAC256(KEY));
    }

   //接收token,验证token,并返回业务数据
    public static Map<String, Object> parseToken(String token) {
        return JWT.require(Algorithm.HMAC256(KEY))
                .build()
                .verify(token)
                .getClaim("claims")
                .asMap();
    }

}