Golang JWT.MAPCLAIMS获取用户ID

Question

设置后，一个简单的关联有许多关联，用户has_many帖子可以使用用户ID创建帖子，这似乎是必要的解析JWT声称以获取用户ID并将其放置在创建后创建中。

因此，如何从JWT声称

我尝试解析令牌，但只出现

map[email:[email protected] exp:1.655701949e+09 username:teste]



tokenString := c.GetHeader("Authorization")
    //
claims := jwt.MapClaims{}
token, err := jwt.ParseWithClaims(tokenString, claims, func(token *jwt.Token) (interface{}, error) {
    return []byte("supersecretkey"), nil
})

if claims, ok := token.Claims.(jwt.MapClaims); ok && token.Valid {
    fmt.Printf("%v", claims )
} else {
    fmt.Println(err)
}

Answer 1

我从第一个开始告诉你，当你想生成jwt时
喜欢以下内容：

token := jwt.New(jwt.SigningMethodHS256)
// Set claims
// This is the information which frontend can use
// The backend can also decode the token and get admin etc.
claims := token.Claims.(jwt.MapClaims)
claims["username"] = ID
accessTokenExpireTime := time.Now().Add(time.Hour * 48).Unix()
claims["exp"] = accessTokenExpireTime
// Generate encoded token and send it as response.
// The signing string should be secret (a generated UUID works too)
t, err := token.SignedString([]byte("AccessToken"))

然后当您想解码用户名时，请喜欢以下内容：

type MyCustomClaims struct {
        Username string `json:"username"`
        jwt.StandardClaims
    }

    auth := c.Request.Header.Get("Authorization")
    if auth == "" {
        c.AbortWithStatusJSON(http.StatusUnauthorized, gin.H{"Message": "Authorization Header Not Found"})
        return
    }
    splitToken := strings.Split(auth, "Bearer ")
    auth = splitToken[1]

    token, err := jwt.ParseWithClaims(auth, &MyCustomClaims{}, func(token *jwt.Token) (interface{}, error) {
        return []byte("AccessToken"), nil
    })

    if err != nil {
        c.AbortWithStatusJSON(http.StatusUnauthorized, gin.H{"Message": "Token is wrong or Expire"})
        return
    }


    if claims, ok := token.Claims.(*MyCustomClaims); ok && token.Valid {
        log.Printf("%v %v", claims.Username, claims.StandardClaims.ExpiresAt)
    }