104 lines
2.7 KiB
Go
104 lines
2.7 KiB
Go
package utils
|
||
|
||
import (
|
||
"fmt"
|
||
"github.com/dgrijalva/jwt-go"
|
||
"strconv"
|
||
"time"
|
||
)
|
||
|
||
//创建token,
|
||
/*
|
||
uid:用户名
|
||
secret:密匙
|
||
alg:加密算法类型
|
||
exp：过期时间，单位是秒
|
||
*/
|
||
func CreateJwt(uid string, secret []byte, alg string, exp int64) (tokenString string, err error) {
|
||
//get SigningMethod
|
||
signingMethon := jwt.GetSigningMethod(alg)
|
||
//time.Sleep(time.Nanosecond * time.Duration(RandomInt(0, 10)))
|
||
iat := time.Now().Unix()
|
||
// Create a new token object, specifying signing method and the claims
|
||
// you would like it to contain.
|
||
|
||
token := jwt.NewWithClaims(signingMethon, jwt.MapClaims{
|
||
"iss": "Authen Center",
|
||
"iat": iat,
|
||
"exp": iat + exp,
|
||
"jti": uid,
|
||
})
|
||
|
||
// Sign and get the complete encoded token as a string using the secret
|
||
tokenString, err = token.SignedString(secret)
|
||
//fmt.Printf("get jwt:%v,%v,%v\n%s\n", iat, iat+exp, uid, tokenString)
|
||
return
|
||
}
|
||
|
||
//获取token的用户名
|
||
//tokenString token字符串
|
||
//tag 字段名 如jti
|
||
func GetUid(tokenString string, tag string) (string, error) {
|
||
tokens, err := jwt.Parse(tokenString, func(token *jwt.Token) (interface{}, error) {
|
||
// Don't forget to validate the alg is what you expect:
|
||
|
||
// hmacSampleSecret is a []byte containing your secret, e.g. []byte("my_secret_key")
|
||
return []byte(""), nil
|
||
})
|
||
if tokens == nil {
|
||
return "", err
|
||
}
|
||
//fmt.Printf("%#v",tokens.Claims.(jwt.MapClaims))
|
||
uid := tokens.Claims.(jwt.MapClaims)[tag]
|
||
switch t := uid.(type) {
|
||
case int:
|
||
_ = t
|
||
return strconv.Itoa(uid.(int)), nil
|
||
case float64:
|
||
_ = t
|
||
return strconv.FormatFloat(uid.(float64), 'g', 12, 64), nil
|
||
//... etc
|
||
}
|
||
return uid.(string), nil
|
||
}
|
||
|
||
//验证token
|
||
//secret 秘钥
|
||
//tokenString token的字符串
|
||
func VerifyJwt(secret []byte, tokenString string) (state int) {
|
||
token, err := jwt.Parse(tokenString, func(token *jwt.Token) (interface{}, error) {
|
||
// Don't forget to validate the alg is what you expect:
|
||
if _, ok := token.Method.(*jwt.SigningMethodHMAC); !ok {
|
||
return nil, fmt.Errorf("Unexpected signing method: %v", token.Header["alg"])
|
||
}
|
||
// secret is a []byte containing your secret, e.g. []byte("my_secret_key")
|
||
return secret, nil
|
||
})
|
||
|
||
if err != nil {
|
||
state := -1 // jwt解析错误
|
||
tempError := err.(*jwt.ValidationError)
|
||
//fmt.Println("jwt error")
|
||
//fmt.Println(tempError)
|
||
|
||
//jwt过期
|
||
if tempError.Errors == jwt.ValidationErrorExpired {
|
||
//fmt.Println("jwt expired")
|
||
state = -2
|
||
}
|
||
// jwt IAT 错误
|
||
if tempError.Errors == jwt.ValidationErrorIssuedAt {
|
||
//fmt.Printf("jwt iat error")
|
||
state = -3
|
||
}
|
||
return state
|
||
}
|
||
|
||
if _, ok := token.Claims.(jwt.MapClaims); ok && token.Valid {
|
||
// fmt.Println(claims["iat"], claims["exp"])
|
||
// 验证通过
|
||
return 0
|
||
}
|
||
return 5
|
||
}
|