JWT基础

JWT

---

Overview

实现Token的一种方式，主流Web框架都可以使用，小巧，安全，轻便

Structure

由三部分组成，Header，Payload，Signature

eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.  
eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiYWRtaW4iOnRydWV9.  
TJVA95OrM7E2cBab30RMHrHDcEfxjoYZgeFONFh7HgQ

While this looks like gibberish, it is actually a verycompact,printablerepresentation of a seriesofclaims, along with asignatureto verify its authenticity.

{"alg":"HS256","typ":"JWT"}
{"sub":"1234567890","name":"John Doe","admin":true}

• Header：指定加密算法类型

• Payload：在这里添加数据

    - Registered Claims
    	- 配置过期时间
    	- ...
    - Public claims
    - Private claims
    	- 存储自定义数据
  

• Signature：存储加密后的签证信息

    Header + Payload + 盐secret，组合加密后，生成Signature