JWT(json web token)

spring-boot-jwt
Spring-Boot-OAuth2-JWT-MySQ
jfinal_jwt

JWT 在前后端分离中的应用与实践

maven 依赖

<!--JWT-->
    <dependency>
      <groupId>io.jsonwebtoken</groupId>
      <artifactId>jjwt</artifactId>
      <version>0.7.0</version>
    </dependency>
    <dependency>
      <groupId>joda-time</groupId>
      <artifactId>joda-time</artifactId>
      <version>2.9.4</version>
    </dependency>
    <dependency>
      <groupId>javax.servlet</groupId>
      <artifactId>javax.servlet-api</artifactId>
      <version>3.1.0</version>
    </dependency>

实例

package com.wanggs.cons;


import com.alibaba.fastjson.JSON;
import com.alibaba.fastjson.JSONObject;
import com.wanggs.domain.User;
import io.jsonwebtoken.Claims;
import io.jsonwebtoken.Jws;
import io.jsonwebtoken.Jwts;

import javax.crypto.SecretKeyFactory;
import javax.crypto.spec.PBEKeySpec;
import javax.servlet.http.HttpServletRequest;
import java.security.Key;
import java.security.NoSuchAlgorithmException;
import java.security.spec.InvalidKeySpecException;
import java.security.spec.KeySpec;
import org.joda.time.DateTime;


public class JWT {

    private static String JWT_KEY = "lOi98Jhy6dt";//PropertyUtil.getProperty("jwt.key","lOi98Jhy6dt");
    private static Key key = null;
    // token过期时间天数
    private static int EXP_DAYS = 30;//Integer.valueOf(PropertyUtil.getProperty("jwt.expDays", "30"));


    static {
        SecretKeyFactory keyFactory;
        try {
            keyFactory = SecretKeyFactory.getInstance("PBEWithMD5AndDES");

            KeySpec keySpec = new PBEKeySpec(JWT_KEY.toCharArray());

            key = keyFactory.generateSecret(keySpec);

        } catch (NoSuchAlgorithmException | InvalidKeySpecException e) {
            e.printStackTrace();
        }
    }

    public static String create(User user) {
        String json = JSON.toJSONString(user);

        return Jwts.builder().setSubject(user.getId().toString()).setClaims(JSON.parseObject(json))
                .setExpiration(new DateTime().plusDays(EXP_DAYS).toDate()).signWith(io.jsonwebtoken.SignatureAlgorithm.HS512, key).compact();
    }

    public static User parse(String compactJws) throws NoAuthorization {
        if (compactJws == null) {
            throw new NoAuthorization();
        }
        try {
            Jws<Claims> claims = Jwts.parser().setSigningKey(key).parseClaimsJws(compactJws);

            // 走到这里说明token验证通过
            // 接下来获取信息

            Claims body = claims.getBody();

            JSONObject jsonObject = new JSONObject(body);

            return JSON.toJavaObject(jsonObject, User.class);
        } catch (Exception e) {
            throw new NoAuthorization();
        }
    }

    public static boolean checkToken(HttpServletRequest request) {
        String token = getToken(request);
        return checkToken(token);
    }

    public static boolean checkToken(String compactJws) {
        try {
            //LOG.debug("检查token:{}", compactJws);
            Jwts.parser().setSigningKey(key).parseClaimsJws(compactJws);
            return true;
        } catch (Exception e) {
            return false;
        }
    }

    public static User parse(HttpServletRequest request) throws NoAuthorization {
        String token = getToken(request);
        return parse(token);
    }

    public static String getToken(HttpServletRequest request) {
        String jwt = request.getHeader("Authorization");
        if (jwt == null) {
            return null;
        }
        jwt = jwt.replace("Bearer", "").trim();

        return jwt;
    }

    public static void main(String[] args) {
        User user = new User();
        user.setId(1L);
        user.setOpenId("aaaaa");
        user.setNickName("bbbbb");

        String jwt = create(user);

        System.out.println("jwt:" + jwt);

        try {
            Thread.sleep(1000);
            System.out.println("checkToken:" + checkToken(jwt));
            User user2 = parse(jwt);

            System.out.println(JSON.toJSONString(user2));
        } catch (Exception e) {
            e.printStackTrace();
        }

    }

    /**
     * 输出:
     * jwt:eyJhbGciOiJIUzUxMiJ9.eyJuaWNrTmFtZSI6ImJiYmJiIiwib3BlbklkIjoiYWFhYWEiLCJpZCI6MSwiZXhwIjoxNTA3Mjc0OTUzfQ.CvdniqQ29gVokSmh8kj8qrlbgea5Ij49aI0y6Zx0YnjP0djodI7c1SwAYyAyrcMzk5BIau3Z8rMdb3m8z-7Nbg
     * checkToken:true
     {"id":1,"nickName":"bbbbb","openId":"aaaaa"}
     * 
     */

}

异常

public class NoAuthorization extends Exception {
    private static final long serialVersionUID = -4640347603089936793L;

}

实体类

package com.wanggs.domain;

import java.util.Date;

/**
 * Created by wanggs on 2017/9/6.
 */
public class User {
    private Long id;
    private String name;
    private String username;
    private String pswd;
    private Date gmtCreate;
    // 微信openId,数据库字段:openId
    private String openId;
    // 微信nickName,数据库字段:nickName
    private String nickName;
    // 微信性别,1男,2女,数据库字段:gender
    private Integer gender;
    // 微信头像,数据库字段:headimgurl
    private String headimgurl;
    // 微信用户组,数据库字段:groupId
    private Integer groupId;
    // 登录时间,数据库字段:loginTime
    private Date loginTime;
    // 登录城市,数据库字段:loginCity
    private String loginCity;
    // 是否玩过神机妙算/0未玩过/1玩过,数据库字段:isPlay
    private Integer isPlay;

    public void setId(Long id){
        this.id = id;
    }
    public Long getId(){
        return this.id;
    }

    public void setName(String name){
        this.name = name;
    }
    public String getName(){
        return this.name;
    }

    public void setUsername(String username){
        this.username = username;
    }
    public String getUsername(){
        return this.username;
    }

    public void setPswd(String pswd){
        this.pswd = pswd;
    }
    public String getPswd(){
        return this.pswd;
    }

    public void setGmtCreate(Date gmtCreate){
        this.gmtCreate = gmtCreate;
    }
    public Date getGmtCreate(){
        return this.gmtCreate;
    }

    /** 设置 微信openId,对应字段 user.openId */
    public void setOpenId(String openId){
        this.openId = openId;
    }
    /** 获取 微信openId,对应字段 user.openId */
    public String getOpenId(){
        return this.openId;
    }

    /** 设置 微信nickName,对应字段 user.nickName */
    public void setNickName(String nickName){
        this.nickName = nickName;
    }
    /** 获取 微信nickName,对应字段 user.nickName */
    public String getNickName(){
        return this.nickName;
    }

    /** 设置 微信性别,1男,2女,对应字段 user.gender */
    public void setGender(Integer gender){
        this.gender = gender;
    }
    /** 获取 微信性别,1男,2女,对应字段 user.gender */
    public Integer getGender(){
        return this.gender;
    }

    /** 设置 微信头像,对应字段 user.headimgurl */
    public void setHeadimgurl(String headimgurl){
        this.headimgurl = headimgurl;
    }
    /** 获取 微信头像,对应字段 user.headimgurl */
    public String getHeadimgurl(){
        return this.headimgurl;
    }

    /** 设置 微信用户组,对应字段 user.groupId */
    public void setGroupId(Integer groupId){
        this.groupId = groupId;
    }
    /** 获取 微信用户组,对应字段 user.groupId */
    public Integer getGroupId(){
        return this.groupId;
    }

    /** 设置 登录时间,对应字段 user.loginTime */
    public void setLoginTime(Date loginTime){
        this.loginTime = loginTime;
    }
    /** 获取 登录时间,对应字段 user.loginTime */
    public Date getLoginTime(){
        return this.loginTime;
    }

    /** 设置 登录城市,对应字段 user.loginCity */
    public void setLoginCity(String loginCity){
        this.loginCity = loginCity;
    }
    /** 获取 登录城市,对应字段 user.loginCity */
    public String getLoginCity(){
        return this.loginCity;
    }

    /** 设置 是否玩过神机妙算/0未玩过/1玩过,对应字段 user.isPlay */
    public void setIsPlay(Integer isPlay){
        this.isPlay = isPlay;
    }
    /** 获取 是否玩过神机妙算/0未玩过/1玩过,对应字段 user.isPlay */
    public Integer getIsPlay(){
        return this.isPlay;
    }
    }

}