<!-- JWT 依賴(lài) -->
<dependency>
    <groupId>com.auth0</groupId>
    <artifactId>java-jwt</artifactId>
    <version>4.4.0</version>
</dependency>

package com.pjb.util;
 
import com.auth0.jwt.JWT;
import com.auth0.jwt.JWTVerifier;
import com.auth0.jwt.algorithms.Algorithm;
import com.auth0.jwt.exceptions.AlgorithmMismatchException;
import com.auth0.jwt.exceptions.SignatureVerificationException;
import com.auth0.jwt.exceptions.TokenExpiredException;
import com.auth0.jwt.interfaces.DecodedJWT;
 
import java.util.Calendar;
import java.util.HashMap;
import java.util.Map;
 
/**
 * JWT 工具類(lèi)
 * @author pan_junbiao
 **/
public class JwtUtil
{
    //密鑰
    private final static String SECRET_KEY = "123456789";
 
    /**
     * 創(chuàng)建 JWT 令牌
     */
    public static String createToken(Map<String, Object> payloadClaims)
    {
        //創(chuàng)建 Header（頭部）內(nèi)容
        HashMap<String, Object> headerMap = new HashMap<>();
 
        //令牌過(guò)期時(shí)間
        Calendar instance = Calendar.getInstance();
        instance.add(Calendar.SECOND, 60); //60秒
 
        //生成 JWT 令牌
        String token = JWT.create()
                .withExpiresAt(instance.getTime())     //設(shè)置令牌過(guò)期時(shí)間
                .withHeader(headerMap)                 //設(shè)置 Header（頭部）
                .withPayload(payloadClaims)            //設(shè)置 Payload（載荷）
                .sign(Algorithm.HMAC256(SECRET_KEY));  //設(shè)置 Signature（簽名）
 
        //返回結(jié)果
        return token;
    }
 
    /**
     * 驗(yàn)證 JWT 令牌
     */
    public static DecodedJWT verifierToken(String jwtToken)
    {
        try
        {
            //創(chuàng)建驗(yàn)證對(duì)象
            JWTVerifier jwtVerifier = JWT.require(Algorithm.HMAC256(SECRET_KEY)).build();
 
            //驗(yàn)證令牌
            DecodedJWT decodedJWT = jwtVerifier.verify(jwtToken);
 
            //返回結(jié)果
            return decodedJWT;
        } catch (SignatureVerificationException ex)
        {
            System.out.println("無(wú)效的簽名");
            ex.printStackTrace();
        } catch (TokenExpiredException ex)
        {
            System.out.println("Token已過(guò)期");
            ex.printStackTrace();
        } catch (AlgorithmMismatchException ex)
        {
            System.out.println("驗(yàn)證的算法不一致");
            ex.printStackTrace();
        } catch (Exception ex)
        {
            System.out.println("Token驗(yàn)證發(fā)生異常");
            ex.printStackTrace();
        }
        return null;
    }
}

/**
 * 使用 JWT 實(shí)現(xiàn) Token 認(rèn)證機(jī)制
 */
@Test
public void testJwtToken()
{
    //創(chuàng)建數(shù)據(jù)（Payload 載荷）
    Map<String, Object> payloadClaims = new HashMap<>();
    payloadClaims.put("userId",1);
    payloadClaims.put("userName","pan_junbiao的博客");
    payloadClaims.put("blogInfo","您好，歡迎訪(fǎng)問(wèn) pan_junbiao的博客");
    payloadClaims.put("blogUrl","https://blog.csdn.net/pan_junbiao");
 
    // 1、創(chuàng)建 JWT 令牌
    String token = JwtUtil.createToken(payloadClaims);
 
    // 2、驗(yàn)證 JWT 令牌
    DecodedJWT decodedJWT = JwtUtil.verifierToken(token);
    if(decodedJWT == null)
    {
        System.out.println("驗(yàn)證 JWT 令牌失敗");
        return;
    }
 
    //打印結(jié)果
    System.out.println("生成Token：" + token);
    System.out.println("驗(yàn)證Token：" + (decodedJWT != null));
    System.out.println("Token過(guò)期時(shí)間：" + decodedJWT.getExpiresAtAsInstant());
    System.out.println("用戶(hù)編號(hào)：" + decodedJWT.getClaim("userId").asInt());
    System.out.println("用戶(hù)名稱(chēng)：" + decodedJWT.getClaim("userName").asString());
    System.out.println("博客信息：" + decodedJWT.getClaim("blogInfo").asString());
    System.out.println("博客地址：" + decodedJWT.getClaim("blogUrl").asString());
}