Go语言中使用JWT进行身份验证的几种方式

go get github.com/dgrijalva/jwt-go

package util

import (
	"time"
	"github.com/dgrijalva/jwt-go"
)

// Secret key used to sign the JWT
var secretKey = []byte("your-secret-key")

// GenerateJWT 生成JWT
func GenerateJWT(user string) (string, error) {
	// 创建一个新的JWT
	token := jwt.New(jwt.SigningMethodHS256)

	// 设置claim
	claims := token.Claims.(jwt.MapClaims)
	claims["user"] = user
	claims["exp"] = time.Now().Add(time.Hour * 72).Unix() // 设置过期时间

	// 签名生成token
	tokenString, err := token.SignedString(secretKey)
	if err != nil {
		return "", err
	}

	return tokenString, nil
}

package util

import (
	"github.com/dgrijalva/jwt-go"
	"errors"
)

// ParseJWT 解析JWT
func ParseJWT(tokenString string) (string, error) {
	// 解析token
	token, err := jwt.Parse(tokenString, func(token *jwt.Token) (interface{}, error) {
		// 检查签名方法是否符合
		if _, ok := token.Method.(*jwt.SigningMethodHS256); !ok {
			return nil, errors.New("unexpected signing method")
		}
		return secretKey, nil
	})
	if err != nil {
		return "", err
	}

	// 验证token并获取claim
	if claims, ok := token.Claims.(jwt.MapClaims); ok && token.Valid {
		user := claims["user"].(string)
		return user, nil
	}
	return "", errors.New("invalid token")
}

go get github.com/golang-jwt/jwt

go get github.com/lestrrat-go/jwx