thinkphp如何使用jwt

### ThinkPHP 8 中 JWT 使用教程 #### 安装依赖库 为了在 ThinkPHP 8 中使用 JWT，需先安装 `firebase/php-jwt` 库。可以通过 Composer 来完成此操作： ```bash composer require firebase/php-jwt ``` #### 创建 JWT 工具类 创建一个新的工具类用于处理 JWT 的生成与解析工作。 ```php <?php namespace app\common\tool; use Firebase\JWT\JWT; use Firebase\JWT\Key; class JwtTool { private static $key = "example_key"; /** * Generate a new token. * * @param array $payload Payload data to be included in the token. * @return string Generated JWT token. */ public static function generateToken(array $payload): string { return JWT::encode($payload, self::$key, 'HS256'); } /** * Decode an existing token and verify its validity. * * @param string $token The JWT token that needs decoding. * @throws Exception If there is any issue during decode process or validation fails. * @return object Decoded payload as stdClass object. */ public static function parseToken(string $token) :object { try { $decoded = JWT::decode($token, new Key(self::$key, 'HS256')); return (array)$decoded; } catch (\Exception $e) { throw new \Exception('Invalid Token', 401); } } } ``` #### 用户登录逻辑实现 当用户成功登录后，可以利用上述定义的方法来创建一个带有有效载荷（Payload）的令牌，并将其作为响应的一部分发送给客户端[^2]。 ```php public function login() { // Assume username/password verification has been done here... // Prepare payload with necessary information about this session/user $payload = [ 'iss' => request()->domain(), 'iat' => time(), 'exp' => time() + 3600, 'nbf' => time(), 'sub' => $userId, 'email'=> $userEmail ]; // Create JSON Web Token using our custom tool method $jwt = JwtTool::generateToken($payload); // Respond back to client including generated jwt within headers header("Authorization: Bearer {$jwt}"); echo json(['status'=>'success','message'=>"Login successful"]); } ``` #### 请求认证中间件设置 为了让每次 HTTP 请求都能自动校验传入的身份验证头信息中的 JWT 是否合法，在应用入口处配置全局过滤器或编写专门针对 API 路由组使用的中间件来进行这项检查。 ```php // application/middleware/JWTAuth.php namespace app\middleware; use Closure; use think\Exception; use app\common\tool\JwtTool; class JWTAuth { protected $ignoreUrls = []; public function handle($request, Closure $next){ // Ignore specific urls from being authenticated via JWT foreach ($this->ignoreUrls as $urlPattern) { if(preg_match("#^{$urlPattern}$#", strtolower($request->path()))){ return $next($request); } } // Extract Authorization Header Value list($header,) = explode(' ', $request->header('authorization'), 2)+['']; switch(strtolower(trim($header))){ case '': throw new Exception('Missing authorization header.', 401); case 'bearer': break; default : throw new Exception('Unsupported authentication scheme.', 401); } // Validate provided token against secret key stored server side only try { $data = JwtTool::parseToken($request->server('HTTP_AUTHORIZATION')); // Attach decoded claims onto current Request instance for later use inside controllers $request->withData([ ...$request->getData(), '_auth_claims_' => $data ]); return $next($request); }catch(\Exception $ex){ throw new Exception($ex->getMessage(), $ex->getCode()); } } } ```