composer require firebase/php-jwt

CREATE TABLE `users` (
  `id` INT AUTO_INCREMENT PRIMARY KEY,
  `username` VARCHAR(50) NOT NULL UNIQUE,
  `password` VARCHAR(255) NOT NULL
);

<?php
require 'vendor/autoload.php';
use Firebase\JWT\JWT;

// 連接數(shù)據(jù)庫(kù)
$pdo = new PDO('mysql:host=localhost;dbname=test', 'root', 'password');

function register($username, $password) {
    global $pdo;
    // 檢查用戶名是否已存在
    $stmt = $pdo->prepare("SELECT id FROM users WHERE username = ?");
    $stmt->execute([$username]);
    if ($stmt->fetch()) {
        return ['error' => 'User already exists'];
    }
    // 哈希密碼
    $hash = password_hash($password, PASSWORD_DEFAULT);
    $stmt = $pdo->prepare("INSERT INTO users (username, password) VALUES (?, ?)");
    $stmt->execute([$username, $hash]);
    return ['message' => 'User registered successfully'];
}

function login($username, $password) {
    global $pdo;
    $stmt = $pdo->prepare("SELECT id, password FROM users WHERE username = ?");
    $stmt->execute([$username]);
    $user = $stmt->fetch();
    if (!$user || !password_verify($password, $user['password'])) {
        return ['error' => 'Invalid credentials'];
    }

    // 生成JWT
    $secret_key = "your_secret_key"; // 應(yīng)該是一個(gè)復(fù)雜的隨機(jī)字符串，存儲(chǔ)在環(huán)境變量中
    $payload = [
        'iss' => 'localhost', // 簽發(fā)者
        'aud' => 'localhost', // 接收方
        'iat' => time(), // 簽發(fā)時(shí)間
        'exp' => time() + 3600, // 過期時(shí)間（1小時(shí)）
        'data' => [
            'user_id' => $user['id'],
            'username' => $username
        ]
    ];
    $jwt = JWT::encode($payload, $secret_key, 'HS256');
    return ['token' => $jwt];
}

function getProfile() {
    // 獲取Authorization頭
    $headers = getallheaders();
    if (!isset($headers['Authorization'])) {
        http_response_code(401);
        return ['error' => 'Token not provided'];
    }
    $token = str_replace('Bearer ', '', $headers['Authorization']);
    $secret_key = "your_secret_key";

    try {
        $decoded = JWT::decode($token, new Firebase\JWT\Key($secret_key, 'HS256'));
        // 如果驗(yàn)證成功，$decoded將包含我們之前設(shè)置的payload
        $user_id = $decoded->data->user_id;
        // 現(xiàn)在可以根據(jù)user_id從數(shù)據(jù)庫(kù)獲取用戶信息并返回
        // ... 數(shù)據(jù)庫(kù)查詢代碼 ...
        return ['user' => $userInfo];
    } catch (Exception $e) {
        http_response_code(401);
        return ['error' => 'Invalid token'];
    }
}