Java JWTSigner.sign方法代码示例

import com.auth0.jwt.JWTSigner; //导入方法依赖的package包/类
public String prepareEmailConfirmationCode(User user, String linkId) {
    final long iat = System.currentTimeMillis() / 1000L; // issued at claim
    final long exp = iat + expireResetCode.getSeconds(); // expires claim
    final JWTSigner signer = new JWTSigner(jwtSecret);

    final HashMap<String, Object> claims = new HashMap<>();
    claims.put("vt", 6); //type=email_confirm_code
    claims.put("exp", exp);
    claims.put("email", user.getEmail());
    claims.put("username", user.getUsername());
    if(user.getPassword() != null)
        claims.put("password", user.getPassword());
    if(linkId != null)
        claims.put("linkId", linkId);

    return signer.sign(claims);
}
 

import com.auth0.jwt.JWTSigner; //导入方法依赖的package包/类
/**
 * Prepares & issues a new token and returns it.
 * It puts the following information to the token:
 * <li>
 * <ul>version 'v'</ul>
 * <ul>expiry date 'exp'</ul>
 * <ul>combined hash 'h' value of client_id, client_secret, username and password.</ul><br>
 * This hash is important because if either one of the parameters change, the change in hash value will render the token invalid. Example: if password of user changes, the token will automatically get invalid. Note that this hash is not technically bulletproof, there exist very little (approx. 1 in 4*10^9) chance that it will compute the same hash value.
 * <ul>token type 't' -> 'a' (access) or 'r' (refresh)</ul>
 * </li>
 * It prepares both access and refresh tokens, signs them using JWT and packs in a Token object.
 * Note that this single user implementation does not put username to the claims map.
 *
 * @return generated token
 */
public Token prepareToken(String client_id, String client_secret, String grant_id, Collection<String> scopes) {
    int hash = Objects.hash(client_id, client_secret);
    final long iat = System.currentTimeMillis() / 1000L; // issued at claim
    final long exp = iat + expireAccessToken.getSeconds(); // expires claim. In this case the token expires in 60 seconds
    final JWTSigner signer = new JWTSigner(jwtSecret);

    final HashMap<String, Object> claims = new HashMap<>();
    claims.put("vt", 1); //version=1 & type=access_token
    claims.put("exp", exp);
    claims.put("h", hash);
    claims.put("grant", grant_id);
    final String token_a = signer.sign(claims);

    final HashMap<String, Object> claims_r = new HashMap<>();
    final long exp_r = iat + expireRefreshToken.getSeconds(); // refresh token expire time: 1 week
    claims_r.put("vt", 2); //version=1 & type=refresh_token
    claims_r.put("exp", exp_r);
    claims_r.put("h", hash);
    claims_r.put("grant", grant_id);
    final String token_r = signer.sign(claims_r);

    /* The last parameter (scope) is entirely optional. You can use it to implement scoping requirements. If you would like so, put it to claims map to verify it. */
    return new Token(token_a, token_r, "bearer", expireAccessToken.getSeconds(), scopes == null ? "" : String.join(" ", scopes));
}
 

import com.auth0.jwt.JWTSigner; //导入方法依赖的package包/类
/**
 * 加密，传入一个对象和有效期
 * @param object
 * @param maxAge
 * @param <T>
 * @return
 */
public static <T> String sign(T object, long maxAge) {
    try {
        final JWTSigner signer = new JWTSigner(SECRET);
        final Map<String, Object> claims = new HashMap<String, Object>();
        ObjectMapper mapper = new ObjectMapper();
        String jsonString = mapper.writeValueAsString(object);
        claims.put(PAYLOAD, jsonString);
        claims.put(EXP, System.currentTimeMillis() + maxAge);
        return signer.sign(claims);
    } catch(Exception e) {
        return null;
    }
}
 

import com.auth0.jwt.JWTSigner; //导入方法依赖的package包/类
public String prepareResetCode(User user) {
    int hash = Objects.hash(user.getUsername(), user.getEmail(), user.getPassword(), user.getLastUpdateTime());
    final long iat = System.currentTimeMillis() / 1000L; // issued at claim
    final long exp = iat + expireResetCode.getSeconds(); // expires claim
    final JWTSigner signer = new JWTSigner(jwtSecret);

    final HashMap<String, Object> claims = new HashMap<>();
    claims.put("vt", 5); //type=reset_code
    claims.put("exp", exp);
    claims.put("hash", hash);
    claims.put("user", user.getId());

    return signer.sign(claims);
}
 

import com.auth0.jwt.JWTSigner; //导入方法依赖的package包/类
public String prepareEmailChangeConfirmationCode(User user, String newEmail) {
    int hash = Objects.hash(user.getUsername(), user.getEmail(), user.getPassword());
    final long iat = System.currentTimeMillis() / 1000L; // issued at claim
    final long exp = iat + expireResetCode.getSeconds(); // expires claim
    final JWTSigner signer = new JWTSigner(jwtSecret);

    final HashMap<String, Object> claims = new HashMap<>();
    claims.put("vt", 7); //type=email_change_confirm_code
    claims.put("exp", exp);
    claims.put("user", user.getId());
    claims.put("hash", hash);
    claims.put("new_email", newEmail);
    return signer.sign(claims);
}
 

import com.auth0.jwt.JWTSigner; //导入方法依赖的package包/类
private String prepareCookieValue(User user) {
    int hash = Objects.hash(user.getUsername(), user.getEmail(), user.getPassword());
    final long iat = System.currentTimeMillis() / 1000L; // issued at claim
    final long exp = iat + expireCookie.getSeconds(); // expires claim
    final JWTSigner signer = new JWTSigner(jwtSecret);

    final HashMap<String, Object> claims = new HashMap<>();
    claims.put("vt", 4); //type=cookie_ltat
    claims.put("exp", exp);
    claims.put("hash", hash);
    claims.put("user", user.getId());

    return signer.sign(claims);
}
 

import com.auth0.jwt.JWTSigner; //导入方法依赖的package包/类
public String prepareAuthorizationCode(String client_id, String client_secret, String grant_id, String redirect_uri) {
    int hash = Objects.hash(client_id, client_secret);
    final long iat = System.currentTimeMillis() / 1000L; // issued at claim
    final long exp = iat + expireAuthorizationCode.getSeconds();
    final JWTSigner signer = new JWTSigner(jwtSecret);

    final HashMap<String, Object> claims = new HashMap<>();
    claims.put("vt", 3); //type=authorization_code
    claims.put("exp", exp);
    claims.put("h", hash);
    claims.put("g", grant_id);
    claims.put("r", redirect_uri);
    return signer.sign(claims);
}
 

import com.auth0.jwt.JWTSigner; //导入方法依赖的package包/类
private String generateJwt(boolean shouldBeValid) {
    final String audience = "https://example.com/gw";
    final String issuer = "https://example.com/idp";
    final String secret = CommonTestUtil.JWT_SIGNING_SECRET;

    // issued at claim
    final long issuedAt;
    if (shouldBeValid) {
        // issued now - should not have expired
        issuedAt = System.currentTimeMillis() / 1000L;
    } else {
        // issued in the past - will have expired already
        issuedAt = (System.currentTimeMillis() / 1000L) - 120L;
    }

    // expires claim. In this case the token expires in 60 seconds
    final long expires = issuedAt + 60L;

    final JWTSigner signer = new JWTSigner(secret);

    @SuppressWarnings("unchecked")
    final Map<String, Object> claims = new HashMap() {{
        put("aud", audience);
        put("iss", issuer);
        put("iat", issuedAt);
        put("exp", expires);
        put("sub", CommonTestUtil.AUTHENTICATED_PRINICPAL);
    }};

    return signer.sign(claims);
}
 

import com.auth0.jwt.JWTSigner; //导入方法依赖的package包/类
/**
 * get jwt String of object
 * @param object
 *            the POJO object
 * @param maxAge
 *            the milliseconds of life time
 * @return the jwt token
 */
public static <T> String sign(T object, long maxAge) {
	try {
		final JWTSigner signer = new JWTSigner(SECRET);
		final Map<String, Object> claims = new HashMap<String, Object>();
		ObjectMapper mapper = new ObjectMapper();
		String jsonString = mapper.writeValueAsString(object);
		claims.put(PAYLOAD, jsonString);
		claims.put(EXP, System.currentTimeMillis() + maxAge);
		return signer.sign(claims);
	} catch(Exception e) {
		return null;
	}
}
 

import com.auth0.jwt.JWTSigner; //导入方法依赖的package包/类
public static String createJwt(String secret, String issuer, String subject) {
  final long iat = System.currentTimeMillis() / 1000l; // issued at claim
  final long exp = iat + 60L; // expires claim. In this case the token expires in 60 seconds

  final JWTSigner signer = new JWTSigner(secret);
  final HashMap<String, Object> claims = new HashMap<String, Object>();
  claims.put("iss", issuer);
  claims.put("exp", exp);
  claims.put("iat", iat);
  claims.put("sub", subject);

  return signer.sign(claims);
}
 

import com.auth0.jwt.JWTSigner; //导入方法依赖的package包/类
/**
 * 对claims签名
 * @param claims    待签名数据
 * @return
 */
public String sign(HashMap<String, Object> claims){
    Map<String, Object> tmpClaims = (HashMap)claims.clone();

    JWTSigner signer = new JWTSigner(secret);
    long created = System.currentTimeMillis() / 1000L;
    long expired = created + 7 * 24 * 60 * 60L;
    tmpClaims.put("issuer", issuer);
    tmpClaims.put("expired", expired);

    return signer.sign(tmpClaims);
}
 

import com.auth0.jwt.JWTSigner; //导入方法依赖的package包/类
@BeforeClass
public static void before() {
	Map<String, Object> claims = new HashMap<String, Object>();
	claims.put(JwtConstants.USER_ID, "foo");
	claims.put(JwtConstants.ROLES, Arrays.asList("role1", "role2"));
	
	JWTSigner signer = new JWTSigner(SECRET);
	token = signer.sign(claims);
}
 

import com.auth0.jwt.JWTSigner; //导入方法依赖的package包/类
public void setDCOSCookie(String DCOSsecret, String email) throws Exception {
    final JWTSigner signer = new JWTSigner(DCOSsecret);
    final HashMap<String, Object> claims = new HashMap();
    claims.put("uid", email);
    final String jwt = signer.sign(claims);
    Cookie cookie = new Cookie("dcos-acs-auth-cookie", jwt, false, "", "", 99999, false, false);
    List<Cookie> cookieList = new ArrayList<Cookie>();
    cookieList.add(cookie);
    commonspec.setCookies(cookieList);
}
 

import com.auth0.jwt.JWTSigner; //导入方法依赖的package包/类
public String createJWT(String user_id, int expires) {
	JWTSigner signer = new JWTSigner(this.secret);
	HashMap<String, Object> claims = new HashMap<String, Object>();
	String token = signer.sign(claims, new JWTSigner.Options().setExpirySeconds(expires).setAlgorithm(Algorithm.HS256));
	token = user_id + ':' + token;
	return token;
}
 

import com.auth0.jwt.JWTSigner; //导入方法依赖的package包/类
public static String createJWT(String client_id, String client_secret, String player_id, String[] scopes, int expires) {
	JWTSigner signer = new JWTSigner(client_secret);
	HashMap<String, Object> claims = new HashMap<String, Object>();
	claims.put("player_id", player_id);
	claims.put("scopes", scopes);
	String token = signer.sign(claims, new JWTSigner.Options().setExpirySeconds(expires).setAlgorithm(Algorithm.HS256));
	token = client_id + ':' + token;
	return token;
}