\u5f53\u5ba2\u6237\u7aef\u4f7f\u7528 JWT\uff08JSON Web Token\uff09\u8bbf\u95ee\u670d\u52a1\u5668\u65f6\uff0c\u670d\u52a1\u5668\u9700\u8981\u5728\u6bcf\u6b21\u8bf7\u6c42\u65f6\u5bf9\u5ba2\u6237\u7aef\u63d0\u4f9b\u7684 JWT \u8fdb\u884c\u6821\u9a8c\u3002\u8fd9\u662f JWT \u57fa\u4e8e\u65e0\u72b6\u6001\u8ba4\u8bc1\u7684\u6838\u5fc3\u5de5\u4f5c\u539f\u7406\u4e4b\u4e00\u3002<\/p>\n
JWT \u662f\u65e0\u72b6\u6001\u7684<\/strong>\uff1a \u6821\u9a8c\u7684\u5173\u952e\u6b65\u9aa4<\/strong>\uff1a<\/p>\n \u5047\u8bbe\u5ba2\u6237\u7aef\u5728 \u670d\u52a1\u5668\u7aef\u5728\u6bcf\u6b21\u6536\u5230\u8bf7\u6c42\u65f6\uff0c\u90fd\u9700\u8981\u8fdb\u884c\u6821\u9a8c\uff0c\u4f8b\u5982\uff1a<\/p>\n \u6bcf\u6b21\u8bf7\u6c42\u65f6\uff0c\u670d\u52a1\u5668\u9700\u8981\u5bf9\u5ba2\u6237\u7aef\u4f20\u6765\u7684 JWT \u8fdb\u884c\u6821\u9a8c\uff0c\u4ee5\u786e\u4fdd Token \u7684\u5408\u6cd5\u6027\u3001\u5b89\u5168\u6027\u548c\u6709\u6548\u6027\u3002\u8fd9\u662f\u786e\u4fdd\u65e0\u72b6\u6001\u8ba4\u8bc1\u7cfb\u7edf\u5b89\u5168\u7684\u91cd\u8981\u4e00\u73af\u3002<\/p>\n","protected":false},"excerpt":{"rendered":" \u5f53\u5ba2\u6237\u7aef\u4f7f\u7528 JWT\uff08JSON Web Token\uff09\u8bbf\u95ee\u670d\u52a1\u5668\u65f6\uff0c\u670d\u52a1\u5668\u9700\u8981\u5728\u6bcf\u6b21\u8bf7\u6c42\u65f6\u5bf9\u5ba2\u6237\u7aef\u63d0\u4f9b\u7684 JWT… <\/p>\n
\nJWT \u662f\u65e0\u72b6\u6001\u7684\uff0c\u670d\u52a1\u5668\u4e0d\u9700\u8981\u4fdd\u5b58\u6bcf\u4e2a\u5ba2\u6237\u7aef\u7684\u4f1a\u8bdd\u72b6\u6001\u3002\u5ba2\u6237\u7aef\u6bcf\u6b21\u53d1\u9001\u8bf7\u6c42\u65f6\uff0c\u90fd\u4f1a\u643a\u5e26 JWT\uff0c\u670d\u52a1\u5668\u901a\u8fc7\u6821\u9a8c JWT \u6765\u9a8c\u8bc1\u7528\u6237\u8eab\u4efd\u3002\u56e0\u6b64\uff0c\u670d\u52a1\u5668\u9700\u8981\u5728\u6bcf\u6b21\u8bf7\u6c42\u4e2d\u5bf9 JWT \u8fdb\u884c\u6821\u9a8c\uff0c\u4ee5\u786e\u4fdd\u8bf7\u6c42\u662f\u6765\u81ea\u5408\u6cd5\u7528\u6237\u3002<\/p>\n<\/li>\n\n
exp<\/code>\uff08\u8fc7\u671f\u65f6\u95f4\uff09\u5b57\u6bb5\uff0c\u670d\u52a1\u5668\u9700\u8981\u68c0\u67e5 Token \u662f\u5426\u5df2\u7ecf\u8fc7\u671f\u3002<\/li>\nJWT \u6821\u9a8c\u6b65\u9aa4\u901a\u5e38\u5305\u62ec\uff1a<\/h3>\n
\n
exp<\/code> \u5b57\u6bb5\uff0c\u786e\u4fdd Token \u6ca1\u6709\u8fc7\u671f\u3002<\/li>\niss<\/code>\uff08\u7b7e\u53d1\u8005\uff09\u3001aud<\/code>\uff08\u63a5\u6536\u8005\uff09\u7b49\uff0c\u786e\u4fdd\u8fd9\u4e9b\u4fe1\u606f\u7b26\u5408\u9884\u671f\u3002<\/li>\n<\/ol>\n\u793a\u4f8b\uff1a<\/h3>\n
Authorization<\/code> \u8bf7\u6c42\u5934\u4e2d\u53d1\u9001 JWT\uff1a<\/p>\nAuthorization: Bearer <JWT_TOKEN><\/code><\/pre>\nfunc validateJWT(tokenString string) error {\n \/\/ \u89e3\u6790\u548c\u9a8c\u8bc1 JWT\n token, err := jwt.Parse(tokenString, func(token *jwt.Token) (interface{}, error) {\n \/\/ \u9a8c\u8bc1\u7b7e\u540d\u65b9\u6cd5\u662f\u5426\u6b63\u786e\n if _, ok := token.Method.(*jwt.SigningMethodHMAC); !ok {\n return nil, fmt.Errorf("unexpected signing method: %v", token.Header["alg"])\n }\n \/\/ \u8fd4\u56de\u7528\u4e8e\u7b7e\u540d\u9a8c\u8bc1\u7684\u5bc6\u94a5\n return []byte("your-256-bit-secret"), nil\n })\n\n if err != nil {\n return err\n }\n\n \/\/ \u6821\u9a8c claims \u91cc\u7684 exp \u662f\u5426\u8fc7\u671f\n if claims, ok := token.Claims.(jwt.MapClaims); ok && token.Valid {\n exp := claims["exp"].(float64)\n if time.Now().Unix() > int64(exp) {\n return fmt.Errorf("token is expired")\n }\n return nil\n }\n return fmt.Errorf("invalid token")\n}<\/code><\/pre>\n\u4e3a\u4ec0\u4e48\u6bcf\u6b21\u8bf7\u6c42\u90fd\u9700\u8981\u6821\u9a8c\uff1f<\/h3>\n
\n
\u603b\u7ed3\uff1a<\/h3>\n