Spring boot中使用jwt
spring boot 使用 jwt
本文旨在介绍如何在spring boot
中使用jwt
,不会介绍什么是jwt
。
一、导入依赖
1. spring-boot依赖
<!--父依赖--> <parent> <groupId>org.springframework.boot</groupId> <artifactId>spring-boot-starter-parent</artifactId> <version>2.2.6.RELEASE</version> <relativePath/> </parent> <dependencies> <dependency> <groupId>org.springframework.boot</groupId> <artifactId>spring-boot-starter-web</artifactId> </dependency> <dependency> <groupId>org.projectlombok</groupId> <artifactId>lombok</artifactId> <optional>true</optional> </dependency> <dependency> <groupId>org.springframework.boot</groupId> <artifactId>spring-boot-starter-test</artifactId> <scope>test</scope> <exclusions> <exclusion> <groupId>org.junit.vintage</groupId> <artifactId>junit-vintage-engine</artifactId> </exclusion> <exclusion> <groupId>org.junit.jupiter</groupId> <artifactId>junit-jupiter-api</artifactId> </exclusion> </exclusions> </dependency> <dependency> <groupId>junit</groupId> <artifactId>junit</artifactId> <scope>test</scope> </dependency> </dependencies>
2. jwt 依赖
<dependency> <groupId>com.auth0</groupId> <artifactId>java-jwt</artifactId> <version>3.4.0</version> </dependency>
二、应用
创建一个JwtUtil文件
package cn.edu.swpu.news.util; import cn.edu.swpu.news.entity.User; import com.auth0.jwt.JWT; import com.auth0.jwt.JWTVerifier; import com.auth0.jwt.algorithms.Algorithm; import com.auth0.jwt.exceptions.JWTVerificationException; import com.auth0.jwt.interfaces.DecodedJWT; import lombok.extern.slf4j.Slf4j; import java.time.*; import java.util.HashMap; import java.util.Map; /** * jwt工具类 * @author ycwiacb 2020/5/2 */ @Slf4j public class JwtUtil { //这里填写你自己自定义的SECRET private static final String SECRET = "ycwiacb-secret"; /**生成token*/ public static String sign(User user) { Algorithm algorithm = Algorithm.HMAC256(SECRET); Map<String, Object> map = new HashMap<>(16); map.put("alg", "HS256"); map.put("typ", "JWT"); return JWT.create().withHeader(map) .withClaim("userId", user.getId()) .withClaim("username", user.getUsername()) .withIssuer("ycwiacb") .withIssuedAt(DateUtil.localDateTimeToDate(LocalDateTime.now())) .withExpiresAt(DateUtil.localDateTimeToDate(LocalDateTime.now().plusMinutes(30))) .sign(algorithm); } /**验证token并返回id*/ public static Long verify(String token) { long userId = 0L; try { Algorithm algorithm = Algorithm.HMAC256(SECRET); JWTVerifier jwtVerifier = JWT.require(algorithm) .withIssuer("ycwiacb") .build(); DecodedJWT decodedjwt = jwtVerifier.verify(token); userId = decodedjwt.getClaim("userId").asLong(); } catch (JWTVerificationException e) { log.error("解析token失败, exception = {}", e.toString()); } return userId; } }
注意:这里使用的是decodedjwt.getClaim("userId").asLong(); 这里是asLong(),对应的有asString(),而非toString()。
附上DateUtil文件
package cn.edu.swpu.news.util; import java.time.LocalDateTime; import java.time.ZoneId; import java.util.Date; /** * @author ycwiacb 2020/5/5 */ public class DateUtil { /** *将LocalDateTime 时间类转化为Date * @return Date */ public static Date localDateTimeToDate(LocalDateTime dateTime) { return Date.from(dateTime.atZone(ZoneId.of("Asia/Shanghai")).toInstant()); } }
测试,JwtUtilTest.java
package cn.edu.swpu.news.util; import cn.edu.swpu.news.entity.User; import org.junit.Test; /** * @author ycwiacb 2020/5/10 */ public class JwtUtilTest { @Test public void sign() { User user = new User(); user.setId(1L); user.setUsername("testUserName"); System.out.println("测试jwt:token = " + JwtUtil.sign(user)); } @Test public void verify() { String token = "你生成的token"; System.out.println("解析token:userId=" + JwtUtil.verify(token)); } }
测试结果:
以上就是对jwt的基本操作,具体请看文档
三、参考文档
java-jwt : https://github.com/auth0/java-jwt
相关推荐
xuanwenchao 2020-06-14
Burgesszheng 2020-06-07
SoarFly00 2020-06-03
GreatZhou 2020-05-28
Allenby 2020-05-09
清风徐来水波不兴 2020-03-01
xxuncle 2020-02-15
luckyxl0 2020-02-12
GreatZhou 2020-02-11
jiayuqicz 2020-02-02
shuiluobu 2020-01-29
明瞳 2020-01-05
小火车 2019-12-31
ronzone 2019-11-08
luckyxl0 2018-01-06