JSON Web 令牌 (JWT)：授权与身份验证

JSON Web 令牌（JWT）：授权与身份验证

python
import jwt
# 生成JWT
def generate_jwt(payload, secret_key):
    return jwt.encode(payload, secret_key, algorithm='HS256')
# 验证JWT
def validate_jwt(jwt_token, secret_key):
    try:
        payload = jwt.decode(jwt_token, secret_key, algorithms=['HS256'])
        return payload
    except jwt.ExpiredSignatureError:
        # JWT已过期
        return None
    except jwt.InvalidTokenError:
        # JWT无效
        return None
# 示例用法
secret_key = 'my_secret_key'
# 生成JWT
payload = {'user_id': 123, 'exp': datetime.datetime.utcnow() + datetime.timedelta(minutes=30)}
jwt_token = generate_jwt(payload, secret_key)
# 验证JWT
decoded_payload = validate_jwt(jwt_token, secret_key)
if decoded_payload:
    # JWT有效，进行授权操作
    user_id = decoded_payload['user_id']
    # 其他操作...
else:
    # JWT无效，拒绝访问
    # 其他操作...