C++实现web token加密生成验证

代码#include jwt-cpp/traits/boost-json/traits.h #include boost/json/src.hpp // You may require this if you are not building it elsewhere #include iostream #include sstream void testToken() { using sec std::chrono::seconds; using min std::chrono::minutes; using traits jwt::traits::boost_json; using claim jwt::basic_claimtraits; traits::value_type raw_value; traits::parse(raw_value, R##({api:{array:[1,2,3],null:null}})##); claim from_raw_json(raw_value); claim::set_t list{ once, twice }; std::vectorint64_t big_numbers{ 727663072ULL, 770979831ULL, 427239169ULL, 525936436ULL }; const auto time jwt::date::clock::now(); const auto token jwt::createtraits() .set_type(JWT) .set_issuer(auth.mydomain.io) .set_audience(mydomain.io) .set_issued_at(time) .set_not_before(time) .set_expires_at(time min{ 2 } sec{ 15 }) .set_payload_claim(boolean, true) .set_payload_claim(integer, 12345) .set_payload_claim(precision, 12.3456789) .set_payload_claim(strings, claim(list)) .set_payload_claim(array, claim{ big_numbers.begin(), big_numbers.end() }) .set_payload_claim(object, from_raw_json) .sign(jwt::algorithm::none{}); const auto decoded jwt::decodetraits(token); for (auto e : decoded.get_header_json()) std::cout e.key() e.value() std::endl; const auto array traits::as_array(decoded.get_payload_claim(object).to_json().as_object()[api].as_object()[array]); std::cout payload /object/api/array array std::endl; jwt::verifytraits() .allow_algorithm(jwt::algorithm::none{}) .with_issuer(auth.mydomain.io) .with_audience(mydomain.io) .with_claim(object, from_raw_json) .verify(decoded); } void testTokenES256k() { using sec std::chrono::seconds; using min std::chrono::minutes; using traits jwt::traits::boost_json; using claim jwt::basic_claimtraits; // openssl ecparam -name secp256k1 -genkey -noout -out ec-secp256k1-priv-key.pem std::string es256k_priv_key R(-----BEGIN EC PRIVATE KEY----- MHQCAQEEIArnQWnspKtjiVuZuzuZ/l1Uqqq8gb2unLJ/6U/Saf4ioAcGBSuBBAAK oUQDQgAEfy03KCKUpIPMIJBtIG4xOwGm0Np/yHKaK9EDZi0mZ7VUeeNKq476CU5X 940yusahgneePQrDMF2nWFEtBCOiXQ -----END EC PRIVATE KEY-----); // openssl ec -in ec-secp256k1-priv-key.pem -pubout ec-secp256k1-pub-key.pem std::string es256k_pub_key R(-----BEGIN PUBLIC KEY----- MFYwEAYHKoZIzj0CAQYFK4EEAAoDQgAEfy03KCKUpIPMIJBtIG4xOwGm0Np/yHKa K9EDZi0mZ7VUeeNKq476CU5X940yusahgneePQrDMF2nWFEtBCOiXQ -----END PUBLIC KEY-----); traits::value_type raw_value; traits::parse(raw_value, R##({api:{array:[1,2,3],null:null}})##); claim from_raw_json(raw_value); claim::set_t list{ once, twice }; std::vectorint64_t big_numbers{ 727663072ULL, 770979831ULL, 427239169ULL, 525936436ULL }; const auto time jwt::date::clock::now(); const auto token jwt::createtraits() .set_type(JWT) .set_id(rsa-create-example) .set_issuer(auth.mydomain.io) .set_audience(mydomain.io) .set_issued_at(time) .set_not_before(time) .set_expires_at(time min{ 2 } sec{ 15 }) .set_payload_claim(boolean, true) .set_payload_claim(integer, 12345) .set_payload_claim(precision, 12.3456789) .set_payload_claim(strings, claim(list)) .set_payload_claim(array, claim{ big_numbers.begin(), big_numbers.end() }) .set_payload_claim(object, from_raw_json) .sign(jwt::algorithm::es256k(es256k_pub_key, es256k_priv_key, , )); const auto decoded jwt::decodetraits(token); for (auto e : decoded.get_header_json()) std::cout e.key() e.value() std::endl; const auto array traits::as_array(decoded.get_payload_claim(object).to_json().as_object()[api].as_object()[array]); std::cout payload /object/api/array array std::endl; jwt::verifytraits() .allow_algorithm(jwt::algorithm::es256k(es256k_pub_key, es256k_priv_key, , )) .with_issuer(auth.mydomain.io) .with_audience(mydomain.io) .with_claim(object, from_raw_json) .verify(decoded); } void testTokenRS256() { using sec std::chrono::seconds; using min std::chrono::minutes; using traits jwt::traits::boost_json; using claim jwt::basic_claimtraits; std::string rsa_priv_key R(-----BEGIN PRIVATE KEY----- MIIEvwIBADANBgkqhkiG9w0BAQEFAASCBKkwggSlAgEAAoIBAQC4ZtdaIrd1BPIJ tfnF0TjIK5inQAXZ3XlCrUlJdPXHwIRxdv1FsN12XyMYO/6ymLmo9ryoQeIrsXB XYqlET3zfAYdiwCb0HEsVvhisthwMU4gZQu6TYW2s9LnXZB5rVtcBK69hcSlA2k ZudMZWxZcj0L7KMfO2rIvaHw/qaVOE9j0T257Z8Kp2CLF9MUgX0ObhIsdumFRLaL DvDUmBPr2zuh/34j2XmWwn1yjN/WvGtdfhXW79Ki1S40HcWnygHgLV8sESFKUxxQ mKvPUTwDOIwLFL5WtE8Mz7NkgmDcmWMCHc8kcOIu73Ta/3D4imW7VbKgHZo9K 3ESFE3RjAgMBAAECggEBAJTEIyjMqUT24G2FKiS1TiHvShBkTlQdoR5xvpZMlYbN tVWxUmrAGqCQ/TIjYnfpnzCDMLhdwT48Ab6mQJw69MfiXwc1PvwX1e9hRscGul36 ryGPKIVQEBsQG/zc4/L2tZe8utqeaK7XuYrPp8bk/X1e9qK5m7jJpKosNSLgJj NIbYsBkG2Mlq671irKYj2hVZeaBQmWmZxK4fw0Istz2WfN5nUKUeJhTwpRJLUg4 ELYYoB7EO0Cej9UBG30hbgu4RyXAVbptJH042K5QJROUbtnLWuuWosZ5ATldwO u03dIXL0SH0ao5NcWBzxU4F2sBXZRGP2x/jiSLHcqoECgYEA4qD7mXQpu1b8XO8U 6abpKloJCatSAHzjgdR2eRDRx5PMvloipfwqA77pnbjTUFajqWQgOXsDTCjcdQui wf5XAaWuTeAVTytLQbSiTsBhrnoqVrr3RoyDQmdnwHT8aCMouOgcC5thP9vQ8Us rVdjvRRbnJpg3BeSNimHu9AHgsCgYEA0EzcbOltCWPHRAY7B3Ge/AKBjBQr86Kv TdpTlxePBDVIlHBM6oct2gaSZZoHbqPjbq5v7yf0fKVcXE4bSVgqfDJ/sZQu9Lp PTeV7wkk0OsAMKk7QukEpPno5q6tOTNnFecpUhVLLlqbfqkB2baYYwLJR3IRzboJ FQbLY93E8gkCgYBzlC5VlQbbNqcLXJoImqItgQkkuW5PCgYdwcrSov2ve5r/Acz FNt1aRdSlx4176R3nXyibQA1VwztiUFowiP9WLoM3PtPZwwe4bGHmwGNHPIfwVG mexf9XgKKespYbLhc45tuC08DATnXoYK7O1EnUINSFJRS8cezSI5eHcbQKBgQDC PgqHXZ2aVftqCc1eAaxaIRQhRmYCgUjumaczRFGwVFveP9I6GdiKca3DE3F9Pq PKgejo0SwP5vDTrOGHN14bmGJUMsX9i4MTmZUZ5s8s3lXh3ysfTGAhTd6nKrIE kM3Nh6HWFhROptfc6BNusRh1kX/cspDplK5x8EpJ0QKBgQDWFg6S2je0KtbV5PYe RultUEe2C0jYMDQxJYxbPmtcopvZQrFEur3WKVuLy5UAy7EBvwMnZwIG7OOohJb vkSpADK6VPn9lbqq7O8cTedEHttm6otmLt8ZyEl3hZMaL3hbuRj6ysjmoFKx6CrX rK0/Ikt5ybqUzKCMJZg2VKGTxg -----END PRIVATE KEY-----); traits::value_type raw_value; traits::parse(raw_value, R##({api:{array:[1,2,3],null:null}})##); claim from_raw_json(raw_value); claim::set_t list{ once, twice }; std::vectorint64_t big_numbers{ 727663072ULL, 770979831ULL, 427239169ULL, 525936436ULL }; const auto time jwt::date::clock::now(); const auto token jwt::createtraits() .set_type(JWT) .set_id(rsa-create-example) .set_issuer(auth.mydomain.io) .set_audience(mydomain.io) .set_issued_at(time) .set_not_before(time) .set_expires_at(time min{ 2 } sec{ 15 }) .set_payload_claim(boolean, true) .set_payload_claim(integer, 12345) .set_payload_claim(precision, 12.3456789) .set_payload_claim(strings, claim(list)) .set_payload_claim(array, claim{ big_numbers.begin(), big_numbers.end() }) .set_payload_claim(object, from_raw_json) .set_payload_claim(sample, claim(std::string{ test })) .sign(jwt::algorithm::rs256(, rsa_priv_key, , )); const auto decoded jwt::decodetraits(token); std::cout token: token std::endl; for (auto e : decoded.get_header_json()) // get_payload_json std::cout e.key() e.value() std::endl; std::string rsa_pub_key R(-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGbXWiK3dQTyCbX5xdE4 yCuYp0AF2d15Qq1JSXT/lx8CEcXb9RbDddl8jGDvspi5qPa8qEHiK7FwV2KpRE9 83wGPnYsAm9BxLFb4YrLYcDFOIGULuk2FtrPS512Qea1bXASuvYXEpQNpGbnTGVs WXI9CyjHztqyL2h8P6mlThPY9E9ue2fCqdgixfTFIF9Dm4SLHbphUS2iw7w1JgT 69s7of9I9l5lsJ9cozf1rxrXX4V1u/SotUuNB3Fp8oB4C1fLBEhSlMcUJirz1E8 AziMCxSVrRPDMzfvpIJg3JljAh3PJHDiLu902v9wIplu1WyoB2aPfitxEhRN0 YwIDAQAB -----END PUBLIC KEY-----); const auto array traits::as_array(decoded.get_payload_claim(object).to_json().as_object()[api].as_object()[array]); std::cout payload /object/api/array array std::endl;; jwt::verifytraits() .allow_algorithm(jwt::algorithm::rs256(rsa_pub_key, , , )) .with_issuer(auth.mydomain.io) .with_audience(mydomain.io) .with_claim(object, from_raw_json) .verify(decoded); } int test() { testToken(); // token有效验证 testTokenES256k(); // token加密验证依赖openssl testTokenRS256(); return 0; }输出typ JWTalg nonepayload /object/api/array [1,2,3]typ JWTalg ES256Kpayload /object/api/array [1,2,3]token: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJhdXRoLm15ZG9tYWluLmlvIiwiYXVkIjoibXlkb21haW4uaW8iLCJpYXQiOjE3MjQxMzY1NzMsIm5iZiI6MTcyNDEzNjU3MywiZXhwIjoxNzI0MTM2NzA4LCJib29sZWFuIjp0cnVlLCJpbnRlZ2VyIjoxMjM0NSwicHJlY2lzaW9uIjoxLjIzNDU2Nzg5RTEsInN0cmluZ3MiOlsib25jZSIsInR3aWNlIl0sImFycmF5IjpbNzI3NjYzMDcyLDc3MDk3OTgzMSw0MjcyMzkxNjksNTI1OTM2NDM2XSwib2JqZWN0Ijp7ImFwaSI6eyJhcnJheSI6WzEsMiwzXSwibnVsbCI6bnVsbH19fQ.abnNu6Cw15Bhw-KSyLRyNoczx277lC8X0T2qipZ6zujh_EWGZXzVqIkdgSPrXAmuC9fbOEgdgKoLGSTNvkw4iFX6bql8qcde91rr5wYtp_EnjMk8xM_Ootp6ETO5fF8jZSNdEWWLVpZQxFIm_IFogjbTAzySP4ZuQC1B4Gf_qVM0XAJMG1fW7Hwl_6VtW_SfXf9JEKrJB7d-Tex3aTm-BfRqKIQl0GclWuZtfmvvRmJuMpTr4OqhM7w8FDbavsbjvbNNZyr2tH5P0k8Zm6BWgjAD5y4vlsp0drb_NIaVay5J3VxhGnQ-aReVBfi_N3sbJrLF6vpruEwCnu084P4a-Atyp JWTalg RS256payload /object/api/array [1,2,3]参考GitHub - Thalhammer/jwt-cpp: A header only library for creating and validating json web tokens in c