Class JwtTest

src/test/java/icu/secnotes/test/JwtTest.java:12–108

import java.util.Map;

public class JwtTest {

    private static String weakSignKey = "Aa123123";
    private static Long expire = 3600000L; // 1小时

    /**
     * JWT 令牌生成方法
     * @param claims JWT第二部分载荷，payload中存储的内容
     * @return
     */
    public static String generateJwt(Map<String, Object> claims) {
        String jwttoken = Jwts.builder()
                .signWith(SignatureAlgorithm.HS256, weakSignKey)
                .setClaims(claims)
                .setExpiration(new Date(System.currentTimeMillis() + expire))
                .compact();

        return jwttoken;
    }

    /**
     * JWT 令牌解析方法 - 使用弱密码
     * @param jwttoken
     * @return
     */
    public static Claims parseJwt(String jwttoken) {
        Claims claims = Jwts.parser()
                .setSigningKey(weakSignKey)
                .parseClaimsJws(jwttoken)
                .getBody();

        return claims;
    }

    /**
     * 解析JWT并分别展示header和payload
     * @param jwttoken JWT令牌
     */
    public static void parseAndDisplayJwt(String jwttoken) {
        try {
            // 分割JWT的三个部分
            String[] parts = jwttoken.split("\\.");
            if (parts.length != 3) {
                System.out.println("无效的JWT格式");
                return;
            }

            // 解析header
            String headerJson = new String(Base64.getUrlDecoder().decode(parts[0]), StandardCharsets.UTF_8);
            System.out.println("=== JWT Header ===");
            System.out.println(headerJson);
            System.out.println();

            // 解析payload
            String payloadJson = new String(Base64.getUrlDecoder().decode(parts[1]), StandardCharsets.UTF_8);
            System.out.println("=== JWT Payload ===");
            System.out.println(payloadJson);
            System.out.println();