src/AppBundle/Common/JWTAuth.php

这里只显示每个文件的开头 60 行。登录后可以解锁完整代码。

微信扫码关注公众号，代码整理好后第一时间通知你。

<?php

namespace AppBundle\Common;

class JWTAuth
{
    const ALG = 'sha1';

    const TYP = 'JWT';

    protected $token;

    public function __construct($key)
    {
        $this->token = $key;
    }

    /**
     * @param $payload
     * @param array $options
     *
     * @return string
     */
    public function auth($payload, $options = array())
    {
        if (isset($options['exp']) && isset($options['iat'])) {
            $payload['exp'] = $options['exp'];
            $payload['iat'] = $options['iat'];
        }

        $payload = $this->makePayload($payload);
        $header = $this->makeHeader();
        $token = $this->token;
        $jwtContent = self::urlSafeBase64Encode(json_encode($header)).'.'.self::urlSafeBase64Encode(json_encode($payload));

        return $jwtContent.'.'.self::signature($jwtContent, $token, $header['alg']);
    }

    public function valid($jwt)
    {
        $jwtArray = explode('.', $jwt);
        $token = $this->token;

        if (3 != count($jwtArray)) {
            return false;
        }

        list($header64, $payload64, $sign) = $jwtArray;

        $header = json_decode(self::urlSafeBase64Decode($header64), JSON_OBJECT_AS_ARRAY);
        if (empty($header['alg'])) {
            return false;
        }

        $expectSign = self::signature($header64.'.'.$payload64, $token, $header['alg']);

        if ($expectSign != $sign) {
            return false;
        }