package main
import (
"crypto/rand"
"encoding/json"
"fmt"
"log"
"net/http"
"time"
jwt "github.com/dgrijalva/jwt-go"
)
// 定义Token的Claims
type CustomClaims struct {
Userid string `json:"userid"`
Passwd string `json:"passwd"`
jwt.StandardClaims
}
// 定义Token相关变量
var (
Uid string = "BLMa" //用户名
Pwd string = "5217" //密码
Key string = "token" //默认密钥，服务启动时会修改
Iss string = "guwuy" //签发者
timeStamp int64 = time.Now().Unix() // 时间戳，用于定期更新密钥key
timeSecond int64 = 60 * 60 * 24 * 7 //一周时间的秒数，用于7天修改一次Key
timeExpires int64 = 60 * 60 * 8 // Token 过期时间 秒数，8小时
)
// GenerateRandomString 生成一个指定长度的随机字符串
func GenerateRandomString(length int) (string, error) {
const letters = "abcdefghijklmnopqrstuvwxyz0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ"
bytes := make([]byte, length)
if _, err := rand.Read(bytes); err != nil {
return "", err
}
for i, b := range bytes {
bytes[i] = letters[b%byte(len(letters))]
}
return string(bytes), nil
}
// 定期生成随机Key
func GenerateRandomKey() {
//当前时间戳
timestamp := time.Now().Unix()
if (timestamp-timeStamp > timeSecond) || len(Key) < 10 {
// 修改Key
Key, err := GenerateRandomString(16)
if err != nil {
log.Fatal(err)
}
timeStamp = timestamp // 更新Key修改的时间戳
// 打印时间戳
fmt.Println("timeStamp :", timeStamp, time.Unix(timeStamp, 0))
fmt.Println("Random String:", Key)
}
}
// 生成新的Token
func generateToken(userid string) (string, error) {
// 设置Claims
claims := CustomClaims{
Userid: userid,
Passwd: Pwd,
StandardClaims: jwt.StandardClaims{
ExpiresAt: time.Now().Add(time.Second * 5217).Unix(), // 设置过期时间
Issuer: Iss, // 设置签发者
},
}
// 创建Token
token := jwt.NewWithClaims(jwt.SigningMethodHS256, claims)
// 定期生成随机Key
GenerateRandomKey()
// 签名Token，这里使用硬编码的密钥，实际生产环境中应使用更安全的密钥管理方式
signedToken, err := token.SignedString([]byte(Key))
if err != nil {
return "", err
}
return signedToken, nil
}
// 验证Token
func validateToken(tokenString string) (*CustomClaims, error) {
// 解析Token
token, err := jwt.ParseWithClaims(tokenString, &CustomClaims{}, func(token *jwt.Token) (interface{}, error) {
// 验证Token的签名，这里使用硬编码的密钥
return []byte(Key), nil
})
if claims, ok := token.Claims.(*CustomClaims); ok && token.Valid {
return claims, nil
}
return nil, err
}
// HTTP处理函数：生成Token
func generateTokenHandler(w http.ResponseWriter, r *http.Request) {
//请求参数,实际情况下，这里可能从请求参数或身份验证过程中获取
query := r.URL.Query()
Uid = query.Get("userid")
Pwd = query.Get("passwd")
// 这里加uid，pwd的数据库校验
token, err := generateToken(Uid)
if err != nil {
http.Error(w, err.Error(), http.StatusInternalServerError)
return
}
w.Header().Set("Content-Type", "application/json")
json.NewEncoder(w).Encode(map[string]string{
"token": token,
})
}
// HTTP处理函数：验证Token
func validateTokenHandler(w http.ResponseWriter, r *http.Request) {
tokenString := r.Header.Get("Authorization") // 假设Token在Authorization头中
claims, err := validateToken(tokenString)
if err != nil {
http.Error(w, err.Error(), http.StatusUnauthorized)
return
}
w.Header().Set("Content-Type", "application/json")
json.NewEncoder(w).Encode(map[string]interface{}{
"userid": claims.Userid,
"expires": claims.ExpiresAt,
})
}
// main入口
func main() {
// 检查并生成Key
GenerateRandomKey()
// Token 路由
http.HandleFunc("/generate-token", generateTokenHandler)
// Http://localhost:8080/generate-token?userid=blma&passwd=5217
// curl Http://localhost:8080/generate-token?userid=blma%26passwd=5217
http.HandleFunc("/validate-token", validateTokenHandler)
//curl http://localhost:8080/validate-token -H "Authorization:eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VyaWQiOiI5OTk4IiwicGFzc3dkIjoiODk5OSIsImV4cCI6MTcwOTcyMDU0MSwiaXNzIjoiZ3V3dXkifQ.UXiW-cgnDZfGUmLtv_yme6gzFZ9XDiKaNATIdFzJ2fY"
fmt.Println("Starting Token server ...")
fmt.Println("Http://localhost:8080/generate-token?userid=&passwd=")
fmt.Println("curl http://localhost:8080/validate-token -H \"Authorization:token\"")
log.Fatal(http.ListenAndServe(":8080", nil))
}
