Axiomatrix_Org/optimized_go_tools
2
0
Fork 0
Code Issues Pull Requests Actions Packages repo.project_board Releases Wiki Activity

將JWT升格為RSA簽名

Browse Source
This commit is contained in:
Kynix Chen 2024-07-10 12:01:18 +08:00
parent c9a62ff0ff
commit 191ea5389e
1 changed files with 15 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
am_jwt/jwt.go
View File

@ -117,9 +117,15 @@ func GenToken(claims *TokenClaims) (string, error) {
Issuer: claims.Issuer, // 签发人 Issuer: claims.Issuer, // 签发人
} }
// 解析私鑰
privKey, err := jwt.ParseRSAPrivateKeyFromPEM([]byte(claims.SECRET))
if err != nil {
return "", err
}
// 生成token字串 // 生成token字串
tokenGenerator := jwt.NewWithClaims(jwt.SigningMethodHS256, tokenClaims) tokenGenerator := jwt.NewWithClaims(jwt.SigningMethodHS256, tokenClaims)
token, err := tokenGenerator.SignedString([]byte(claims.SECRET)) // 生成token token, err := tokenGenerator.SignedString(privKey) // 生成token
if err != nil { if err != nil {
return "", err return "", err
} }
@ -147,9 +153,15 @@ func GenToken(claims *TokenClaims) (string, error) {
* 3. secret string：解码密钥 * 3. secret string：解码密钥
*/ */
func ParseToken(token string, roleRequired int, secret string) (*TokenClaims, error) { func ParseToken(token string, roleRequired int, secret string) (*TokenClaims, error) {
// 解析公鑰
pem, err := jwt.ParseRSAPublicKeyFromPEM([]byte(secret))
if err != nil {
return nil, err
}
// 解析token // 解析token
result, err := jwt.ParseWithClaims(token, &TokenClaims{}, func(token *jwt.Token) (interface{}, error) { result, err := jwt.ParseWithClaims(token, &TokenClaims{}, func(token *jwt.Token) (interface{}, error) {
return []byte(secret), nil return pem, nil
}) })
// 解析出现问题 // 解析出现问题
@ -195,7 +207,7 @@ func ParseToken(token string, roleRequired int, secret string) (*TokenClaims, er
if ClaimToRole(claims.Role) >= roleRequired { // 如果提供的token权限验证大于所需权限，初步判断通过 if ClaimToRole(claims.Role) >= roleRequired { // 如果提供的token权限验证大于所需权限，初步判断通过
if roleRequired == 1 && ClaimToRole(claims.Role) == 2 { // user权限无权新增用户 if roleRequired == 1 && ClaimToRole(claims.Role) == 2 { // user权限无权新增用户
return nil, InvalidRoleError return nil, InvalidRoleError
} } // user不允許操作temp
if ClaimToRole(claims.Role) == 1 { // temp权限仅用于注册和重设密码临时使用，一经使用立即灭活 if ClaimToRole(claims.Role) == 1 { // temp权限仅用于注册和重设密码临时使用，一经使用立即灭活
_, err := Kickoff(token) _, err := Kickoff(token)