\u57fa\u672c\u7684\u306a\u751f\u6210\u3068\u691c\u8a3c\u306e\u307f<\/p>\n
package main\r\n\r\nimport (\r\n\t\"errors\"\r\n\t\"log\"\r\n\r\n\tjwt \"github.com\/dgrijalva\/jwt-go\"\r\n)\r\n\r\n\/*\r\n\r\n\u30fbJwt\u69cb\u6210\r\n\r\nBase64url\u3067\u30a8\u30f3\u30b3\u30fc\u30c9\u3055\u308c\u3066\u3044\u308b\u3002\r\n\"+\" > \"-\"\r\n\"\/\" > \"_\"\r\n\"=\" > \"\"\r\n\r\nJwt\u306f3\u30d1\u30fc\u30c8\u3001\u30d8\u30c3\u30c0\u30fc\u3001\u30da\u30a4\u30ed\u30fc\u30c9\u3001\u7f72\u540d\u304c\u3042\u308b\u3002\r\n\u30d8\u30c3\u30c0\u30fc\u306ftyp\u3068alg\u3067\u69cb\u6210\u3002\r\n\u30da\u30a4\u30ed\u30fc\u30c9\u306fClaim(\u5c5e\u6027)\u3067\u5fc5\u9808\u306f\u306a\u3044\u304c\u4e88\u7d04\u30d1\u30e9\u30e1\u30fc\u30bf\u306f\u3042\u308b\u3002\r\n\u7f72\u540d\u306f\u30a8\u30f3\u30b3\u6e08\u307f\u30d8\u30c3\u30c0\u30fc\u3068\u30da\u30a4\u30ed\u30fc\u30c9\u3092\u30d4\u30ea\u30aa\u30c9\u3067\u3064\u306a\u3044\u3067\u3001alg\u306e\u30a2\u30eb\u30b4\u30ea\u30ba\u30e0\u3067\u7f72\u540d\u3057\u305f\u3082\u306e\u3002\r\n\r\n\u30fbBearer\u8a8d\u8a3c(\u30c8\u30fc\u30af\u30f3\u3092\u6301\u3063\u3066\u304d\u305f\u3089\u8a8d\u8a3c\u3059\u308b\u65b9\u5f0f)\r\n\r\n\u30c8\u30fc\u30af\u30f3\u3092\u30d8\u30c3\u30c0\u30fc\u306b\u4ed8\u4e0e\u3059\u308b\u5834\u5408\u3001Authorization\u30d8\u30c3\u30c0\u30fc\u306b\u4ed8\u4e0e\u3059\u308b\u3002\r\n(\u30ab\u30b9\u30bf\u30e0\u30d8\u30c3\u30c0\u30fc(x-\u4ed8)\u306b\u3059\u308b\u3053\u3068\u3082\u3067\u304d\u308b)\r\n\r\n\u30d8\u30c3\u30c0\u30fc\u5f62\u5f0f\r\nAuthorization: auth-scheme credential\r\nauth-scheme\u306e\uff11\u3064\u3068\u3057\u3066Bearer\r\n\r\nBearer\u8a8d\u8a3c\u306e\u30d8\u30c3\u30c0\u30fc\u5f62\u5f0f\r\nAuthorization: Bearer token68\r\n\r\n*\/\r\n\r\nfunc main() {\r\n\r\n\ttokenString := createToken(\"123\")\r\n\tlog.Print(tokenString)\r\n\r\n\t\/\/\u751f\u6210\u3057\u305f\u6587\u5b57\u5217\u3092\u305d\u306e\u307e\u307e\u30c1\u30a7\u30c3\u30af\u3057\u3066\u307f\u308b\u3002\r\n\tlog.Print(authToken(tokenString, \"123\")) \/\/ok\r\n\r\n\t\/\/\u751f\u6210\u3057\u305f\u6587\u5b57\u5217\u3092\u9055\u3046\u30ad\u30fc\u3067\u30c1\u30a7\u30c3\u30af\u3057\u3066\u307f\u308b\u3002\r\n\tlog.Print(authToken(tokenString, \"234\")) \/\/signature is invalid\r\n\r\n}\r\n\r\nfunc createToken(key string) string {\r\n\r\n\t\/*\r\n\r\n\t\t\u751f\u6210\u65b9\u6cd5\u3044\u304f\u3064\u304b\r\n\r\n\t\ttoken := jwt.New(jwt.SigningMethodHS256)\r\n\t\tc := token.Claims.(jwt.MapClaims)\r\n\t\tc[\"user\"] = \"taro\"\r\n\r\n\t\t--------------------------------------------------------\r\n\r\n\t\tc := jwt.StandardClaims{\r\n\t\t\tAudience: \"taro\",\r\n\t\t}\r\n\t\ttoken := jwt.NewWithClaims(jwt.SigningMethodHS256, c)\r\n\r\n\t\t--------------------------------------------------------\r\n\r\n\t\ttype User struct {\r\n\t\t\tName string\r\n\t\t\tjwt.StandardClaims\r\n\t\t}\r\n\r\n\t\ttoken := jwt.NewWithClaims(jwt.GetSigningMethod(\"HS256\"), &User{\r\n\t\t\tName: \"taro\",\r\n\t\t})\r\n\r\n\t*\/\r\n\r\n\t\/\/\u96fb\u5b50\u7f72\u540d\r\n\ttoken := jwt.New(jwt.SigningMethodHS256)\r\n\r\n\t\/\/\u5c5e\u6027\u60c5\u5831\r\n\tc := token.Claims.(jwt.MapClaims)\r\n\tc[\"user\"] = \"taro\"\r\n\r\n\t\/*\r\n\r\n\t\t\u6a19\u6e96Claim\u304c\u6e96\u5099\u3055\u308c\u3066\u3044\u308b\r\n\r\n\t*\/\r\n\r\n\t\/\/key\u3067\u6587\u5b57\u5217\u5316\r\n\ttokenString, _ := token.SignedString([]byte(key))\r\n\treturn tokenString\r\n}\r\n\r\nfunc authToken(tokenString string, key string) string {\r\n\r\n\t\/\/key\u3067token\u5316\r\n\ttoken, err := jwt.Parse(tokenString, func(token *jwt.Token) (interface{}, error) {\r\n\r\n\t\t\/\/\u3053\u306e\u3088\u3046\u306a\u30a2\u30eb\u30b4\u30ea\u30ba\u30e0\u30c1\u30a7\u30c3\u30af\u3092\u5165\u308c\u3066\u3044\u308b\u8a18\u4e8b\u304c\u591a\u3044\u3002\r\n\t\t\/\/HMAC(\u5171\u901a),ECDSA,RSA(\u516c\u958b)\r\n\t\tif _, ok := token.Method.(*jwt.SigningMethodHMAC); !ok {\r\n\t\t\treturn nil, errors.New(\"alg error\")\r\n\t\t}\r\n\r\n\t\t\/\/key\u3092\u8fd4\u3059\r\n\t\treturn []byte(key), nil\r\n\r\n\t})\r\n\r\n\tif err != nil {\r\n\t\tlog.Print(err)\r\n\t\treturn \"\"\r\n\t}\r\n\r\n\tif !token.Valid {\r\n\t\treturn \"valid error\"\r\n\t}\r\n\r\n\treturn \"ok\"\r\n}\r\n<\/pre>\n <\/p>\n","protected":false},"excerpt":{"rendered":"
\u57fa\u672c\u7684\u306a\u751f\u6210\u3068\u691c\u8a3c\u306e\u307f package main import ( “errors” “log” jwt “github.com\/dgrijalva\/jwt-go” ) \/* \u30fbJwt\u69cb\u6210 Base64url\u3067\u30a8\u30f3\u30b3\u30fc\u30c9 … <\/p>\n