Python PyJWT库简化JSON Web Token的生成与验证

pip install PyJWT

import jwt
import datetime

# 密钥，用于签名和验证JWT
secret_key = 'your-secret-key'

# 载荷，即JWT中包含的信息
payload = {
    'user_id': 123,
    'username': 'john_doe',
    'exp': datetime.datetime.utcnow() + datetime.timedelta(days=1)
}

# 生成JWT
token = jwt.encode(payload, secret_key, algorithm='HS256')
print('Generated JWT:', token)

import jwt
import datetime

# 密钥，用于验证JWT
secret_key = 'your-secret-key'

# 待验证的JWT
received_token = 'your-received-token'

try:
    # 验证JWT
    decoded_payload = jwt.decode(received_token, secret_key, algorithms=['HS256'])
    print('Decoded Payload:', decoded_payload)
except jwt.ExpiredSignatureError:
    print('JWT has expired.')
except jwt.InvalidTokenError:
    print('Invalid JWT.')

import jwt
import datetime

# 密钥，用于签名和验证JWT
secret_key = 'your-secret-key'

# 载荷，即JWT中包含的信息
payload = {
    'user_id': 123,
    'username': 'john_doe',
}

# 自定义过期时间为10分钟后
expiration_time = datetime.datetime.utcnow() + datetime.timedelta(minutes=10)

# 生成JWT并指定算法和额外的头部信息
token = jwt.encode(payload, secret_key, algorithm='HS256', headers={'kid': 'key-id'}, exp=expiration_time)
print('Generated JWT:', token)

import jwt

# 密钥，用于签名和验证JWT
secret_key = 'your-secret-key'

# 模拟用户登录，生成JWT
def generate_jwt(user_id, username):
    payload = {'user_id': user_id, 'username': username}
    return jwt.encode(payload, secret_key, algorithm='HS256')

# 模拟用户访问需要认证的资源，验证JWT
def verify_jwt(received_token):
    try:
        decoded_payload = jwt.decode(received_token, secret_key, algorithms=['HS256'])
        print('User ID:', decoded_payload['user_id'])
        print('Username:', decoded_payload['username'])
    except jwt.ExpiredSignatureError:
        print('JWT has expired.')
    except jwt.InvalidTokenError:
        print('Invalid JWT.')

# 模拟用户登录和访问
user_token = generate_jwt(123, 'john_doe')
verify_jwt(user_token)

# 客户端请求，包含JWT
api_request = make_api_request(user_token)
# 服务器验证JWT并处理请求
handle_api_request(api_request)

# 定制过期时间为10分钟后
expiration_time = datetime.datetime.utcnow() + datetime.timedelta(minutes=10)
token = jwt.encode(payload, secret_key, algorithm='HS256', exp=expiration_time)

# 生成JWT时选择使用RS256算法
token = jwt.encode(payload, private_key, algorithm='RS256')