149 lines
3.6 KiB
Go
149 lines
3.6 KiB
Go
package helper
|
|
|
|
import (
|
|
"fmt"
|
|
"time"
|
|
|
|
"github.com/golang-jwt/jwt"
|
|
"github.com/yaoapp/gou/process"
|
|
"github.com/yaoapp/gou/session"
|
|
"github.com/yaoapp/kun/any"
|
|
"github.com/yaoapp/kun/exception"
|
|
"github.com/yaoapp/kun/log"
|
|
"github.com/yaoapp/yao/config"
|
|
)
|
|
|
|
// JwtClaims 用户Token
|
|
type JwtClaims struct {
|
|
ID int `json:"id"`
|
|
SID string `json:"sid"`
|
|
Data map[string]interface{} `json:"data"`
|
|
jwt.StandardClaims
|
|
}
|
|
|
|
// JwtToken JWT令牌
|
|
type JwtToken struct {
|
|
Token string `json:"token"`
|
|
ExpiresAt int64 `json:"expires_at"`
|
|
}
|
|
|
|
// JwtValidate JWT 校验
|
|
func JwtValidate(tokenString string, secret ...[]byte) *JwtClaims {
|
|
|
|
jwtSecret := []byte(config.Conf.JWTSecret)
|
|
if len(secret) > 0 {
|
|
jwtSecret = secret[0]
|
|
}
|
|
|
|
token, err := jwt.ParseWithClaims(tokenString, &JwtClaims{}, func(token *jwt.Token) (interface{}, error) {
|
|
return jwtSecret, nil
|
|
})
|
|
|
|
if err != nil {
|
|
log.Error("JWT ParseWithClaims Error: %s", err)
|
|
exception.New("Invalid token", 401).Ctx(err.Error()).Throw()
|
|
return nil
|
|
}
|
|
|
|
if claims, ok := token.Claims.(*JwtClaims); ok && token.Valid {
|
|
return claims
|
|
}
|
|
|
|
exception.New("Invalid token", 401).Ctx(token.Claims).Throw()
|
|
return nil
|
|
}
|
|
|
|
// JwtMake 生成 JWT
|
|
// option: {"subject":"<主题>", "audience": "<接收人>", "issuer":"<签发人>", "timeout": "<有效期,单位秒>", "sid":"<会话ID>"}
|
|
func JwtMake(id int, data map[string]interface{}, option map[string]interface{}, secret ...[]byte) JwtToken {
|
|
|
|
jwtSecret := []byte(config.Conf.JWTSecret)
|
|
if len(secret) > 0 {
|
|
jwtSecret = secret[0]
|
|
}
|
|
|
|
now := time.Now().Unix()
|
|
sid := ""
|
|
timeout := int64(3600)
|
|
uid := fmt.Sprintf("%d", id)
|
|
subject := "User Token"
|
|
audience := "Yao Process utils.jwt.Make"
|
|
issuer := fmt.Sprintf("xiang:%d", id)
|
|
|
|
if v, has := option["subject"]; has {
|
|
subject = fmt.Sprintf("%v", v)
|
|
}
|
|
|
|
if v, has := option["audience"]; has {
|
|
audience = fmt.Sprintf("%v", v)
|
|
}
|
|
|
|
if v, has := option["issuer"]; has {
|
|
issuer = fmt.Sprintf("%v", v)
|
|
}
|
|
|
|
if v, has := option["sid"]; has {
|
|
sid = fmt.Sprintf("%v", v)
|
|
}
|
|
|
|
if v, has := option["timeout"]; has {
|
|
timeout = int64(any.Of(v).CInt())
|
|
}
|
|
|
|
expiresAt := now + timeout
|
|
if v, has := option["expires_at"]; has {
|
|
expiresAt = int64(any.Of(v).CInt())
|
|
}
|
|
|
|
if sid == "" {
|
|
sid = session.ID()
|
|
}
|
|
|
|
// 设定会话过期时间 (并写需要加锁，这个逻辑需要优化)
|
|
// session.Global().Expire(time.Duration(timeout) * time.Second)
|
|
|
|
claims := &JwtClaims{
|
|
ID: id,
|
|
SID: sid, // 会话ID
|
|
Data: data,
|
|
StandardClaims: jwt.StandardClaims{
|
|
Id: uid, // 唯一ID
|
|
Subject: subject, // 主题
|
|
Audience: audience, // 接收人
|
|
ExpiresAt: expiresAt, // 过期时间
|
|
NotBefore: now, // 生效时间
|
|
IssuedAt: now, // 签发时间
|
|
Issuer: issuer, // 签发人
|
|
},
|
|
}
|
|
|
|
token := jwt.NewWithClaims(jwt.SigningMethodHS256, claims)
|
|
tokenString, err := token.SignedString([]byte(jwtSecret))
|
|
if err != nil {
|
|
exception.New("JWT Make Error: %s", 500, err.Error()).Throw()
|
|
}
|
|
|
|
return JwtToken{
|
|
Token: tokenString,
|
|
ExpiresAt: expiresAt,
|
|
}
|
|
}
|
|
|
|
// ProcessJwtMake xiang.helper.JwtMake 生成JWT
|
|
func ProcessJwtMake(process *process.Process) interface{} {
|
|
process.ValidateArgNums(2)
|
|
id := process.ArgsInt(0)
|
|
data := process.ArgsMap(1)
|
|
option := map[string]interface{}{}
|
|
if process.NumOfArgsIs(3) {
|
|
option = process.ArgsMap(2)
|
|
}
|
|
return JwtMake(id, data, option)
|
|
}
|
|
|
|
// ProcessJwtValidate xiang.helper.JwtValidate 校验JWT
|
|
func ProcessJwtValidate(process *process.Process) interface{} {
|
|
process.ValidateArgNums(1)
|
|
tokenString := process.ArgsString(0)
|
|
return JwtValidate(tokenString)
|
|
}
|