JWT Field＆＃x27; kid＆＃x27;出现在标题中，要求在有效载荷中

Question

我正在产生JWT令牌。 但是对JWT令牌的要求是，一个称为密​​钥ID的字段应出现在JWT的有效载荷中，但它出现在标题中。我该如何实现？

我的代码：

    Algorithm algorithm = Algorithm.HMAC256(Objects.requireNonNull(environment.getProperty("signing_secret")).getBytes());

    Map<String, Object> headers = new HashMap<>();
    headers.put("dd-ver", environment.getProperty("version"));
    headers.put("auth-version", environment.getProperty("auth-version"));

    String token = JWT.create()
        .withHeader(headers)
        .withAudience(environment.getProperty("audience"))
        .withIssuer(environment.getProperty("developer_id"))
        .withKeyId(environment.getProperty("key_id"))
        .withIssuedAt(new Date(System.currentTimeMillis()))
        .withExpiresAt(new Date(System.currentTimeMillis() + THIRTY_MINUTES))
        .sign(algorithm);

Answer 1

使用Claim可以将自定义属性添加到JWT主体。您可以像这样编写代码。

String token = JWT.create()
            .withHeader(headers)
            .withAudience(environment.getProperty("audience"))
            .withIssuer(environment.getProperty("developer_id"))
            .withClaim("kid",environment.getProperty("key_id"))
            .withIssuedAt(new Date(System.currentTimeMillis()))
            .withExpiresAt(new Date(System.currentTimeMillis() + THIRTY_MINUTES))
            .sign(algorithm);

我们可以从com.auth0.jwt.jwtcreator中找到一些插图：

        /**
         * Add a custom Claim value.
         *
         * @param name  the Claim's name.
         * @param value the Claim's value.
         * @return this same Builder instance.
         * @throws IllegalArgumentException if the name is null.
         */
        public Builder withClaim(String name, String value) throws IllegalArgumentException {
            assertNonNull(name);
            addClaim(name, value);
            return this;
        }

        private void addClaim(String name, Object value) {
            if (value == null) {
                payloadClaims.remove(name);
                return;
            }
            // add custom property to the payload
            payloadClaims.put(name, value);
        }