JWT

package com.box.common.core.utils;

/**
 * 文件描述
 *
 * @author yuan.dingwang
 * @date 2020年11月26日 17:13
 */

public class JWTToken {

     private String access_token;
     private String token_type;
     private Long expires_in;

     private Object date;

    public String getAccess_token() {
        return access_token;
    }

    public void setAccess_token(String access_token) {
        this.access_token = access_token;
    }

    public String getToken_type() {
        return token_type;
    }

    public void setToken_type(String token_type) {
        this.token_type = token_type;
    }

    public Long getExpires_in() {
        return expires_in;
    }

    public void setExpires_in(Long expires_in) {
        this.expires_in = expires_in;
    }

    public Object getDate() {
        return date;
    }

    public void setDate(Object date) {
        this.date = date;
    }
}

JWTToken token = JwtUtils.creatToke(user.getId(), body, newRoles, platform);

StringBuffer key = new StringBuffer(CacheKeyConstant.CECHE_MANAGE_USER_TOKEN).append(platform).append(":").append(user.getId());
redisService.set(key.toString(), token.getAccess_token(), token.getExpires_in() / 1000L);

package com.box.common.core.utils;

import com.alibaba.fastjson.JSONObject;
import com.box.common.core.enums.ErrorCodeEnum;
import com.box.common.core.enums.PlatformEnum;
import com.box.common.core.exception.AuthException;
import com.box.common.core.login.AppLoginInfo;
import com.box.common.core.login.BaseLoginInfo;
import com.box.common.core.login.ManageLoginInfo;
import io.jsonwebtoken.Claims;
import io.jsonwebtoken.JwtBuilder;
import io.jsonwebtoken.Jwts;
import io.jsonwebtoken.SignatureAlgorithm;
import org.apache.tomcat.util.codec.binary.Base64;

import javax.crypto.SecretKey;
import javax.crypto.spec.SecretKeySpec;
import java.util.Date;

/**
 * jwt
 *
 * @author yuan.dingwang
 * @date 2020年11月26日 16:59
 */

public class JwtUtils {

    private static final String JWT_KEY = "box_mall_toke_";
   /*
    private static final int EXPIRE = 7;

    private static final String SECRET = "OpenAPI#LingZeTechCo.,Ltd.@2020";

    private static final String ISSUER = "LingZe Tech Co.,Ltd.";

    private static final Algorithm ALGORITHM = Algorithm.HMAC256(SECRET);

    private static Date getExpiresAt(int days) {
        Instant instant = new Date().toInstant();
        ZoneId zone = ZoneId.systemDefault();
        LocalDateTime date = LocalDateTime.ofInstant(instant, zone).plusDays(days);
        return Date.from(date.atZone(zone).toInstant());
    }
*/

    /**
     * 生成JWT
     *
     * @param body
     * @param role
     * @return
     */
    public static JWTToken creatToke(String uid, BaseLoginInfo body, String role, Integer platform) {
        Long expires_in = 1000 * 60 * 60 * 24L; //一天
        long time = System.currentTimeMillis();
        time = time + expires_in;
        return saveToken(uid, JSONObject.toJSONString(body), role, time, platform);
    }
    
    /**
     * 生成JWT
     *
     * @param body
     * @param role
     * @return
     */
    public static JWTToken creatBoxAppToke(String uid, AppLoginInfo body) {
        Long expires_in = 1000 * 60 * 60 * 24L; //一天
        long time = System.currentTimeMillis();
        time = time + expires_in;
        return saveToken(uid, JSONObject.toJSONString(body), "CUSER", time,PlatformEnum.BOX_C_APP.getCode());
    }

    private static JWTToken saveToken(String uid, String body, String role, long time, Integer platform) {
        JwtBuilder builder = Jwts.builder()
                .setId(uid) //设置唯一ID
                .setSubject(body) //设置内容，这里用JSON包含帐号信息
                .setIssuedAt(new Date()) //签发时间
                //.setExpiration(getExpiresAt(EXPIRE)) //过期时间
                .setExpiration(new Date(time))
                .claim("roles", role) //设置角色
                .signWith(SignatureAlgorithm.HS256, generalKey(platform)) //设置签名 使用HS256算法，并设置密钥
                ;
        String code = builder.compact();
        JWTToken token = new JWTToken();
        token.setAccess_token(code);
        token.setExpires_in(time);
        token.setToken_type("JWT");
        return token;
    }

    /**
     * 解析JWT
     *
     * @param jwt
     * @return
     */
    public static Claims parseJWT(String jwt, Integer platform) {
        Claims body = Jwts.parser().setSigningKey(generalKey(platform)).parseClaimsJws(jwt).getBody();
        return body;
    }

    /**
     * 刷新JWT
     *
     * @param jwt
     * @return
     */
    public static JWTToken refreshJWT(String jwt, Integer platform) {
        Claims claims = parseJWT(jwt, platform);
        BaseLoginInfo body = null;
        if (platform.intValue() == PlatformEnum.BOX_C_APP.getCode()) {
            body = (AppLoginInfo) JSONObject.parse(claims.getSubject());
        } else {
            body = (ManageLoginInfo) JSONObject.parse(claims.getSubject());
        }
        String role = claims.get("roles").toString();
        return creatToke(claims.getId(), body, role, platform);
    }

    /**
     * 设置过期
     *
     * @param jwt
     * @return
     */
    public static JWTToken expireJWT(String jwt, Integer platform) {
        Claims claims = parseJWT(jwt, platform);
        String body = claims.getSubject();
        String role = claims.get("roles").toString();
        return saveToken(claims.getId(), body, role, SystemClockUtils.millisClock().now(), platform);
    }

    /**
     * 获取JWT信息
     *
     * @param jwt
     * @return
     */
    public static Claims infoJWT(String jwt, Integer platform) {
        try {
            Claims claims = parseJWT(jwt, platform);
            return claims;
        } catch (Exception e) {
            throw new AuthException(ErrorCodeEnum.HEAD_GET_USER_NULL);
        }

    }


    /**
     * 验证JWT
     *
     * @param jwt
     * @return
     */
    public static boolean checkJWT(String jwt, Integer platform) {
        try {
            Claims body = Jwts.parser().setSigningKey(generalKey(platform)).parseClaimsJws(jwt).getBody();
            if (body != null) {
                return true;
            }
        } catch (Exception e) {
            return false;
        }
        return false;
    }

    /**
     * 生成加密后的秘钥 secretKey
     *
     * @return
     */
    public static SecretKey generalKey(Integer platform) {
        StringBuffer key = new StringBuffer(JWT_KEY).append(platform);
        byte[] encodedKey = Base64.encodeBase64(key.toString().getBytes());
        return new SecretKeySpec(encodedKey, 0, encodedKey.length, "AES");
    }
}

/**
 * 验证token是否有效
 *
 * @param token
 * @return
 */
public boolean checkToken(String token, Integer platform) {
    //验证token是否有效
    if (StringUtils.isBlank(token)) {
        return true;
    }
    //验证token是否有效
    if (!JwtUtils.checkJWT(token, platform)) {
        return true;
    }
    //验证用户是否过期
    Claims claims = JwtUtils.infoJWT(token, platform);
    if (StringUtils.isNull(claims) || StringUtils.isNull(claims.getId())
            || StringUtils.isNull(claims.get("roles"))) {
        return true;
    }
    return false;
}