JWT使用RSA加解密

我就是我 2022-09-03 12:28 301阅读 0赞

> RSA密码加密（Java）实现：[https://yuanyu.blog.csdn.net/article/details/119464211][https_yuanyu.blog.csdn.net_article_details_119464211]

#  1 引入依赖 #

<parent>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-parent</artifactId>
        <version>2.5.3</version>
        <relativePath/>
    </parent>
    
    <dependencies>
        
        <dependency>
            <groupId>io.jsonwebtoken</groupId>
            <artifactId>jjwt</artifactId>
            <version>0.9.1</version>
        </dependency>
        
        <dependency>
            <groupId>commons-codec</groupId>
            <artifactId>commons-codec</artifactId>
            <version>1.15</version>
        </dependency>
        
        <dependency>
            <groupId>com.google.guava</groupId>
            <artifactId>guava</artifactId>
            <version>30.1.1-jre</version>
        </dependency>
    </dependencies>

--------------------

# 2 配置文件 #

application.properties

### jwt过期时间
    authentication.jwt.expire=7200
    ### 私钥
    authentication.jwt.priKey=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
    ### 公钥
    authentication.jwt.pubKey=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC/PCy7J8G9pqNu6f9wkrJ6ysYVAS0KQhDJqT+ZrwUO9jOrk4JVNzhdOq+V1R9Kj+gnbkhiYYPeP1QxASqw9oN41EiUn+drnugvgk8QUcGv0ECBr+1J9ytzOZRqlDXAwAI05ZhsQpktRsOT5BiN/Oz7v/dclswYBk01c4+httbgOwIDAQAB

--------------------

# 3 常量类 #

public class JwtConstants {
        /**
         * 用户ID
         */
        public static final String JWT_KEY_USER_ID = "userid";
        /**
         * 组织ID
         */
        public static final String JWT_KEY_ORG_ID = "orgid";
    }

--------------------

# 4 JWT对象 #

/**
     * jwt 存储的 内容
     */
    @Data
    @Builder
    @AllArgsConstructor
    @NoArgsConstructor
    public class JwtUserInfo implements Serializable {
        /**
         * 账号ID
         */
        private Integer userId;
    
        /**
         * 当前登录人单位组织ID
         */
        private Integer orgId;
    }

--------------------

# 5 加解密工具类 #

public class CommonUtils {
        public static Date localDateTime2Date(LocalDateTime localDateTime) {
            ZoneId zoneId = ZoneId.systemDefault();
            ZonedDateTime zdt = localDateTime.atZone(zoneId);
            return Date.from(zdt.toInstant());
        }
        public static Integer intValueOf0(String value) {
            try {
                return Integer.valueOf(value);
            } catch (Exception e) {
                return 0;
            }
        }
    }

@Slf4j
    public class JwtHelper {
        /**
         * 生成用户token
         *
         * @param jwtInfo    待加密的用户信息
         * @param privateKey base64加密私钥
         * @param expire     jwt过期时间
         * @return token
         */
        public static Token generateUserToken(JwtUserInfo jwtInfo, String privateKey, int expire) {
            JwtBuilder jwtBuilder = Jwts.builder()
                    //设置主题
                    .setSubject(String.valueOf(jwtInfo.getUserId()))
                    .claim(JwtConstants.JWT_KEY_ORG_ID, jwtInfo.getOrgId());
            return generateToken(jwtBuilder, privateKey, expire);
        }
    
        /**
         * 生成token
         *
         * @param builder    JwtBuilder
         * @param privateKey base64加密私钥
         * @param expire     jwt过期时间
         * @return token
         */
        protected static Token generateToken(JwtBuilder builder, String privateKey, int expire) {
            try {
                //返回的字符串便是我们的jwt串了
                String compactJws = builder
                        .setExpiration(CommonUtils.localDateTime2Date(LocalDateTime.now().plusSeconds(expire)))
                        //设置算法（必须）
                        .signWith(SignatureAlgorithm.RS256, getRSAPrivateKey(privateKey))
                        //这个是全部设置完成后拼成jwt串的方法
                        .compact();
                return new Token(compactJws, expire);
            } catch (Exception e) {
                log.error("generate token fail, privateKey:[{}], err:[{}]", privateKey, Throwables.getStackTraceAsString(e));
                // 抛出自定义异常
            }
            return null;
        }
    
        /**
         * 获取token中的用户信息
         *
         * @param token     token
         * @param publicKey base64加密公钥
         * @return /
         */
        public static JwtUserInfo getJwtFromToken(String token, String publicKey) {
            Jws<Claims> claimsJws = parserToken(token, publicKey);
            if (claimsJws != null) {
                Claims body = claimsJws.getBody();
                String strUserId = body.getSubject();
                String strOrgId = body.get(JwtConstants.JWT_KEY_ORG_ID) + "";
                return JwtUserInfo.builder()
                        .userId(CommonUtils.intValueOf0(strUserId))
                        .orgId(CommonUtils.intValueOf0(strOrgId))
                        .build();
            }
            return null;
        }
    
        /**
         * 公钥解析token
         *
         * @param token     token
         * @param publicKey base64加密公钥
         * @return /
         */
        private static Jws<Claims> parserToken(String token, String publicKey) {
            try {
                return Jwts.parser().setSigningKey(getRSAPublicKey(publicKey)).parseClaimsJws(token);
            } catch (ExpiredJwtException ex) {
                //过期
                // 抛出自定义异常
            } catch (SignatureException ex) {
                //签名错误
                // 抛出自定义异常
            } catch (IllegalArgumentException ex) {
                //token 为空
                // 抛出自定义异常
            } catch (Exception e) {
                log.error("parse token fail, token:[{}], publicKey:[{}], err:[{}]", token, publicKey, Throwables.getStackTraceAsString(e));
                // 抛出自定义异常
            }
            return null;
        }
        
        /**
         * 获取 RSAPublicKey
         *
         * @param pubKey base64加密公钥
         */
        private static RSAPublicKey getRSAPublicKey(String pubKey) throws NoSuchAlgorithmException {
            X509EncodedKeySpec keySpec = new X509EncodedKeySpec(Base64.decodeBase64(pubKey));
            RSAPublicKey publicKey = null;
            KeyFactory keyFactory = KeyFactory.getInstance("RSA");
            try {
                publicKey = (RSAPublicKey) keyFactory.generatePublic(keySpec);
            } catch (Exception e) {
                log.error("get RSAPublicKey fail ,pubKey:[{}] ,err:[{}]", pubKey, Throwables.getStackTraceAsString(e));
            }
            return publicKey;
        }
    
        /**
         * 获取 RSAPrivateKey
         *
         * @param priKey base64加密私钥
         */
        private static RSAPrivateKey getRSAPrivateKey(String priKey) throws NoSuchAlgorithmException {
            PKCS8EncodedKeySpec keySpec = new PKCS8EncodedKeySpec(Base64.decodeBase64(priKey));
            RSAPrivateKey privateKey = null;
            KeyFactory keyFactory = KeyFactory.getInstance("RSA");
            try {
                privateKey = (RSAPrivateKey) keyFactory.generatePrivate(keySpec);
            } catch (Exception e) {
                log.error("get RSAPrivateKey fail ,priKey:[{}], err:[{}]", priKey, Throwables.getStackTraceAsString(e));
            }
            return privateKey;
        }
        /**
         * 生成base64加密后的公钥和私钥
         */
        public static Map<String, String> genRsaKey() throws NoSuchAlgorithmException {
            KeyPairGenerator keyPairGenerator = KeyPairGenerator.getInstance("RSA");
            keyPairGenerator.initialize(1024, new SecureRandom());
            KeyPair keyPair = keyPairGenerator.genKeyPair();
            byte[] publicKeyBytes = keyPair.getPublic().getEncoded();
            byte[] privateKeyBytes = keyPair.getPrivate().getEncoded();
            HashMap<String, String> keyMap = new HashMap<>();
            keyMap.put("publicKey", Base64.encodeBase64String(publicKeyBytes));
            keyMap.put("privateKey", Base64.encodeBase64String(privateKeyBytes));
            return keyMap;
        }
    }

--------------------

# 6 测试加解密工具类 #

@SpringBootTest
    public class JwtHelperTest {
        /**
         * 私钥
         */
        @Value("${authentication.jwt.priKey}")
        private String priKey;
        /**
         * 公钥
         */
        @Value("${authentication.jwt.pubKey}")
        private String pubKey;
        /**
         * 工期时间 s
         */
        @Value("${authentication.jwt.expire}")
        private Integer expire;
    
        @Test
        public void testJwt() {
            Token token = JwtHelper.generateUserToken(JwtUserInfo.builder().userId(10000).orgId(100).build(), priKey, expire);
            JwtUserInfo userInfo = JwtHelper.getJwtFromToken(token.getToken(), pubKey);
            System.out.println(userInfo);
        }
    }

[https_yuanyu.blog.csdn.net_article_details_119464211]: https://yuanyu.blog.csdn.net/article/details/119464211