<?php class JwtBase { //头部 private static $header=array( 'alg'=>'HS256', //生成signature的算法 'typ'=>'JWT' //类型 ); //使用HMAC生成信息摘要时所使用的密钥 private static $key='zhouein'; /** * 获取jwt token * @return bool|string */ public static function getToken(array $payload) { $arr = [ 'iss'=>'yamecent', //该JWT的签发者 'iat'=>time(), //签发时间 'exp'=>time()+3600*24*15, //过期时间 'nbf'=>time(), //该时间之前不接收处理该Token 'sub'=>'', //面向的用户 'jti'=>md5(uniqid('JWT').time()) //该Token唯一标识 ]; $payload = array_merge($arr,$payload); if(is_array($payload)) { $base64header=self::base64UrlEncode(json_encode(self::$header,JSON_UNESCAPED_UNICODE)); $base64payload=self::base64UrlEncode(json_encode($payload,JSON_UNESCAPED_UNICODE)); $token=$base64header.'.'.$base64payload.'.'.self::signature($base64header.'.'.$base64payload,self::$key,self::$header['alg']); return $token; }else{ return false; } } /** * 验证token是否有效,默认验证exp,nbf,iat时间 * @param string $Token 需要验证的token * @return bool|string */ public static function verifyToken($Token) { $tokens = explode('.', $Token); if (count($tokens) != 3) return false; list($base64header, $base64payload, $sign) = $tokens; //获取jwt算法 $base64decodeheader = json_decode(self::base64UrlDecode($base64header), JSON_OBJECT_AS_ARRAY); echo "验证码为:".self::signature($base64header . '.' . $base64payload, self::$key, $base64decodeheader['alg']); ECHO "<BR>"; echo "你输入的验证码为:".$sign; if (empty($base64decodeheader['alg'])) return false; //签名验证 if (self::signature($base64header . '.' . $base64payload, self::$key, $base64decodeheader['alg']) !== $sign) return false; $payload = json_decode(self::base64UrlDecode($base64payload), JSON_OBJECT_AS_ARRAY); //签发时间大于当前服务器时间验证失败 if (isset($payload['iat']) && $payload['iat'] > time()) return false; //过期时间小宇当前服务器时间验证失败 if (isset($payload['exp']) && $payload['exp'] < time()) return false; //该nbf时间之前不接收处理该Token if (isset($payload['nbf']) && $payload['nbf'] > time()) return false; return $payload; } /** * base64UrlEncode https://jwt.io/ 中base64UrlEncode编码实现 * @param string $input 需要编码的字符串 * @return string */ private static function base64UrlEncode($input) { return str_replace('=', '', strtr(base64_encode($input), '+/', '-_')); } /** * base64UrlEncode https://jwt.io/ 中base64UrlEncode解码实现 * @param string $input 需要解码的字符串 * @return bool|string */ private static function base64UrlDecode($input) { $remainder = strlen($input) % 4; if ($remainder) { $addlen = 4 - $remainder; $input .= str_repeat('=', $addlen); } return base64_decode(strtr($input, '-_', '+/')); } /** * HMACSHA256签名 https://jwt.io/ 中HMACSHA256签名实现 * @param string $input 为base64UrlEncode(header).".".base64UrlEncode(payload) * @param string $key * @param string $alg 算法方式 * @return mixed */ private static function signature($input, $key, $alg = 'HS256') { $alg_config=array( 'HS256'=>'sha256' ); return self::base64UrlEncode(hash_hmac($alg_config[$alg], $input, $key,true)); } } //////////////////////////////1.生成token//////////// $token_a = JwtBase::getToken(['user_id'=>'0000']); echo $token_a; echo "<br>"; //////////////////////////////2.生成token//////////// $payload = array( "password"=> "128DEdddddd", "device_id"=> "790e5476-66eb-47f6-906b-206f81d71f52", "scope"=> "msso onstar mag_subscriber mag_visitor", "grant_type"=> "password", "username"=> "1533ddddddd", "timestamp"=> "2021-08-20T02:34:07.276Z", "client_id"=> "ONSTAR_CHINA_MOBILE_AND_80", "nonce"=> "17b2d6c0-f180-11eb-b486-bd377c2a82c6", "assertion"=> null ); $jwt=new JwtBase(); $token_b=$jwt->getToken($payload); //$token = $Jwt->getToken(['user_id'=>'111']); echo $token_b; //////////////////////1.验证////////////////////// $data_a = JwtBase::verifyToken('eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.jL_HSfiBDzw4F0jEgRKs04eIBrvqpUQuhPWR3M0lzGY验证码为:-E_8YsLTcrzWOu9_XYRTGTyLEmjer6-lBbHhJbJXJWc'); var_dump($data_a); //////////////////////2.验证////////////////////// $data_b = $jwt->verifyToken($token_b); var_dump($data_b);