Java's JJWT achieve JWT

JJWT JWT is a provider of end-to-create and verify Java library

rely

        <dependency>
            <groupId>io.jsonwebtoken</groupId>
            <artifactId>jjwt</artifactId>
            <version>RELEASE</version>
        </dependency>

Create token

setIssuedAt用于设置签发时间
signWith用于设置签名秘钥

        JwtBuilder builder = Jwts.builder().setId("111")
                .setSubject("小明")
                .setIssuedAt(newDate())
                .signWith(SignatureAlgorithm.HS256, "ld");

        String token = builder.compact();

token parsing

        String token = "~~~";
        Claims claims = Jwts.parser().setSigningKey("ld").parseClaimsJws(token).getBody();
        System.out.println("id:" + claims.getId());
        System.out.println("subject:" + claims.getSubject());
        System.out.println("IssuedAt:" + claims.getIssuedAt());

token expires check

        long now = System.currentTimeMillis();  //当前时间
        long exp = now + 1000 * 60; //过期时间为1分钟
        JwtBuilder builder = Jwts.builder().setId("111")
                .setSubject("小明")
                .setIssuedAt(new Date())
                .signWith(SignatureAlgorithm.HS256, "ld")
                .setExpiration(new Date(exp));

当未过期时可以正常读取
当过期时会引发 io.jsonwebtoken.ExpiredJwtException 异常

Custom claims

        long now = System.currentTimeMillis();  //当前时间
        long exp = now + 1000 * 60; //过期时间为1分钟
        JwtBuilder builder = Jwts.builder().setId("111")
                .setSubject("小明")
                .setIssuedAt(new Date())
                .signWith(SignatureAlgorithm.HS256, "ld")
                .setExpiration(new Date(exp))
                .claim("role", "admin");

获取：
    claims.get("role")