赞
踩
1、添加maven依赖到pom.xml
- <dependency>
- <groupId>io.jsonwebtoken</groupId>
- <artifactId>jjwt-api</artifactId>
- <version>0.11.5</version>
- </dependency>
- <dependency>
- <groupId>io.jsonwebtoken</groupId>
- <artifactId>jjwt-impl</artifactId>
- <version>0.11.5</version>
- </dependency>
-
-
- <dependency>
- <groupId>io.jsonwebtoken</groupId>
- <artifactId>jjwt-gson</artifactId>
- <version>0.11.5</version>
- </dependency>

2、写个持久工具类
- package com.scxhgh.scxhgh.token_session;
-
- import io.jsonwebtoken.Claims;
- import io.jsonwebtoken.Jwts;
- import io.jsonwebtoken.SignatureAlgorithm;
- import io.jsonwebtoken.security.Keys;
- import org.springframework.stereotype.Component;
-
- import java.security.Key;
- import java.util.Date;
-
- @Component
- public class JwtUtil {
-
-
- //
- // <dependency>
- // <groupId>io.jsonwebtoken</groupId>
- // <artifactId>jjwt-api</artifactId>
- // <version>0.11.5</version>
- // </dependency>
- // <dependency>
- // <groupId>io.jsonwebtoken</groupId>
- // <artifactId>jjwt-impl</artifactId>
- // <version>0.11.5</version>
- // </dependency>
- //
- //
- // <dependency>
- // <groupId>io.jsonwebtoken</groupId>
- // <artifactId>jjwt-gson</artifactId>
- // <version>0.11.5</version>
- // </dependency>
-
-
- private final String secretKey = "dshhdshissajsakpxfksxxz"; // 用于签署和验证令牌的密钥,请替换为自己的密钥
- private final Key key = Keys.hmacShaKeyFor(secretKey.getBytes());
-
- private final long validityInMilliseconds = 3600000; // 令牌有效期一小时
- // private final long validityInMilliseconds = 60000; // 令牌有效期一分钟
- public String generateToken(String username) {
- Date now = new Date();
- Date validity = new Date(now.getTime() + validityInMilliseconds);
-
- return Jwts.builder()
- .setSubject(username)
- .setIssuedAt(now)
- .setExpiration(validity)
- .signWith(key, SignatureAlgorithm.HS256)
- .compact();
- }
-
- public String getUsernameFromToken(String token) {
- Claims claims = Jwts.parserBuilder()
- .setSigningKey(key)
- .build()
- .parseClaimsJws(token)
- .getBody();
-
- return claims.getSubject();
- }
-
- public boolean validateToken(String token) {
- try {
- Jwts.parserBuilder()
- .setSigningKey(key)
- .build()
- .parseClaimsJws(token);
- return true;
- } catch (Exception e) {
- return false;
- }
- }
- }

3、启动服务器测试下,写个controller和html,客户端请求获取token
controller(生成token 与验证 token):
- package com.scxhgh.scxhgh.token_session;
-
- import org.springframework.web.bind.annotation.*;
-
- @RestController
- @RequestMapping("/api")
- public class UserController {
-
-
- private final JwtUtil jwtUtil;
-
- public UserController(JwtUtil jwtUtil) {
- this.jwtUtil = jwtUtil;
- }
-
- // 生成token
- @PostMapping("/login_token")
- public String login(@RequestBody UserLoginRequest request) {
- // 在实际应用中,你可以验证用户名和密码,然后生成令牌
- // 这里只是一个简单的示例,假设用户名有效
-
- String username = request.getUsername();
- String token = jwtUtil.generateToken(username);
-
- return token;
- }
-
- // 验证token
-
-
-
- @GetMapping("/user")
- public String getUserInfo(@RequestHeader("Authorization") String token) {
- if (jwtUtil.validateToken(token)) {
- String username = jwtUtil.getUsernameFromToken(token);
- return "Hello, " + username + "!";
- } else {
- return "Invalid token";
- }
- }
- }

html (请求token)
- <!DOCTYPE html>
- <html lang="en">
- <head>
- <meta charset="UTF-8">
- <title>Login Page</title>
- </head>
- <body>
- <h1>Login Page</h1>
- <form id="login-form">
- <label for="username">Username:</label>
- <input type="text" id="username" name="username" required><br><br>
-
- <label for="password">Password:</label>
- <input type="password" id="password" name="password" required><br><br>
-
- <button type="button" onclick="login()">Login</button>
- </form>
-
- <div id="token-info" style="display: none;">
- <h2>Token Information</h2>
- <p id="token-content"></p>
- </div>
-
- <script>
- function login() {
- const username = document.getElementById('username').value;
- const password = document.getElementById('password').value;
-
- // 发送登录请求到后端
- fetch('/api/login_token', {
- method: 'POST',
- headers: {
- 'Content-Type': 'application/json'
- },
- body: JSON.stringify({ username, password })
- })
- .then(response => response.text())
- .then(token => {
- // 显示令牌信息
- document.getElementById('token-info').style.display = 'block';
- document.getElementById('token-content').textContent = 'Token: ' + token;
- })
- .catch(error => {
- console.error('Login failed:', error);
- });
- }
- </script>
- </body>
- </html>

Copyright © 2003-2013 www.wpsshop.cn 版权所有,并保留所有权利。