本文摘自网络，作者，侵删。

(进阶)golang+gin+jwt实现用户登录获取token

1.获取token

POST请求参数

{
    "name":"xj",
    "pwd":"xj123456"
}

golang api router:


// 获取Token
router.POST("/api/getToken", service.GetApiTokenService)

service:


//请求参数结构体
type GetTokenRequestParam struct {
  Name string `json:"Name"`
  Pwd  string `json:"Pwd"`
}

//自定义密钥
var tokenApiSecret = "itxj980420"
//获取token
func GetTokenService(c *gin.Context) {
  reqModel := GetTokenRequestParam{}
  errByBind := c.Bind(&reqModel)
  if errByBind != nil {
      c.JSON(http.StatusOK, gin.H{
          "code":    http.StatusBadRequest,
          "message": "失败",
          "token":   "",
      })
      return
  }
  //参数非空校验
  if common.IsEmpty(reqModel.Name) || common.IsEmpty(reqModel.Pwd) {
      c.JSON(http.StatusOK, gin.H{
          "code":    http.StatusBadRequest,
          "message": "账号、密码不能为空！！！",
          "token":   "",
      })
      return
  }
  //TODO 添加其他校验如账号密码校验；签名校验等其他自定义参数校验

  //jwt token header 法加密
  token := jwt.New(jwt.SigningMethodHS256)
  //jwt claims 载荷
  //jti：该jwt的唯一标识
  //iss：该jwt的签发者
  //iat：该jwt的签发时间
  //aud：该jwt的接收者
  //sub：该jwt的面向的用户
  //nbf：该jwt的生效时间,可不设置,若设置,一定要大于当前Unix UTC,否则token将会延迟生效
  //  exp：该jwt的过期时间 Unix()
  claims := make(jwt.MapClaims)
  claims["jti"] = reqModel.Name + reqModel.Pwd + strconv.Itoa(int(time.Now().Unix()))
  claims["iss"] = "itxj"
  claims["iat"] = time.Now()
  claims["aud"] = reqModel.Name
  claims["sub"] = reqModel.Name
  claims["nbf"] = time.Now().Unix()
  claims["exp"] = time.Now().Add(time.Hour * time.Duration(24)).Unix()
  //Payload载荷
  token.Claims = claims
  //密钥加密
  tokenStr, errBySignToken := token.SignedString([]byte(tokenApiSecret))
    //token 生成失败
  if errBySignToken != nil {
      c.JSON(http.StatusOK, gin.H{
          "code":    http.StatusUnauthorized,
          "message": "Error while signing the token!",
          "token":   "",
      })
      return
  }
  //success
  c.JSON(http.StatusOK, gin.H{
      "code":    http.StatusOK,
      "message": "Success!",
      "token":   tokenStr,
  })
  return
}

2.路由中间件校验token

GET 请求：

http://ip:port/api/validateToken/:key

Param： key：载荷中的key

//请求
header 里面
    "Token":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJ4aiIsImV4cCI6MTU3Nzg2NjU1NiwiaWF0IjoiMjAxOS0xMi0zMVQxNjoxNTo1NS4zNDUyODkrMDg6MDAiLCJpc3MiOiJpdHhqIiwianRpIjoieGppdHhqMTU3Nzc4MDE1NCIsIm5iZiI6MTU3Nzc4MDE1NSwic3ViIjoieGoifQ.zg0FtD4Ovk0GysPSxn2IZfFkvA6KmqbczDPu9zQDFk4"

gin router api

    router.GET("/api/validateToken/:key", service.ValidateTokenService(), service.TestValidateTokenService)

路由中间件—-：校验token是否有效

//路由中间件校验token
func ValidateTokenService() gin.HandlerFunc {

    return func(c *gin.Context) {

        token, err := request.ParseFromRequest(c.Request, request.AuthorizationHeaderExtractor, func(token *jwt.Token) (i interface{}, e error) {
            return []byte(tokenApiSecret), nil
        })
        if err != nil {
            c.Abort()
            c.JSON(http.StatusOK, gin.H{
                "code":    http.StatusUnauthorized,
                "message": "fail",
                "error":   "Unauthorized!",
            })
            return
        }
        if !token.Valid {
            c.Abort()
            c.JSON(http.StatusOK, gin.H{
                "code":    http.StatusUnauthorized,
                "message": "fail",
                "error":   "An invalid Token!",
            })
            return
        }
        c.Next()
    }
}

service：

//获取token中的账号
func TestValidateTokenService(c *gin.Context) {
    sub := c.Param("key")
    token, _ := GetTokenFromRequest(c)
    claimsVal := GetValueFromTokenClaims(sub, token.Claims)
    c.JSON(http.StatusOK, gin.H{
        "code":      http.StatusOK,
        "message":   "成功",
        "claimsVal": claimsVal,
    })
    return
}

//从请求头中获取token
func GetTokenFromRequest(c *gin.Context) (token *jwt.Token, err error) {
    token, err = request.ParseFromRequest(c.Request, request.AuthorizationHeaderExtractor,
        func(token *jwt.Token) (interface{}, error) {
            return []byte(tokenApiSecret), nil
        })
    return token, err
}

//根据key从载荷中获取数据
func GetValueFromTokenClaims(key string, claims jwt.Claims) string {
    v := reflect.ValueOf(claims)
    if v.Kind() == reflect.Map {
        for _, k := range v.MapKeys() {
            value := v.MapIndex(k)

            if fmt.Sprintf("%s", k.Interface()) == key {
                return fmt.Sprintf("%v", value.Interface())
            }
        }
    }
    return ""
}

本文来自：简书

感谢作者：我是不会赢的

查看原文：(进阶)goland+jwt实现用户登录获取token