licensing-cotton/internal/security/token.go
2025-01-16 15:41:42 +08:00

45 lines
1.0 KiB
Go

package security
import (
"errors"
"github.com/golang-jwt/jwt/v5"
"time"
)
var secretKey = []byte("your-secret-key") // 服务器私钥
// 生成 Token
func GenerateToken(username string) (string, error) {
claims := jwt.MapClaims{
"username": username,
"exp": time.Now().Add(time.Hour * 24).Unix(), // 1 天有效期
}
token := jwt.NewWithClaims(jwt.SigningMethodHS256, claims)
return token.SignedString(secretKey)
}
// 解析 Token
func ParseToken(tokenString string) (string, error) {
token, err := jwt.Parse(tokenString, func(token *jwt.Token) (interface{}, error) {
if _, ok := token.Method.(*jwt.SigningMethodHMAC); !ok {
return nil, errors.New("unexpected signing method")
}
return secretKey, nil
})
if err != nil {
return "", err
}
// 解析 Claims
if claims, ok := token.Claims.(jwt.MapClaims); ok && token.Valid {
username, ok := claims["username"].(string)
if !ok {
return "", errors.New("无效的 Token")
}
return username, nil
}
return "", errors.New("无效的 Token")
}