helper/jwt.go

package helper

import (
	"fmt"
	"time"

	"github.com/golang-jwt/jwt"
	"github.com/yaoapp/gou/process"
	"github.com/yaoapp/gou/session"
	"github.com/yaoapp/kun/any"
	"github.com/yaoapp/kun/exception"
	"github.com/yaoapp/kun/log"
	"github.com/yaoapp/yao/config"
)

// JwtClaims 用户Token
type JwtClaims struct {
	ID   int                    `json:"id"`
	SID  string                 `json:"sid"`
	Data map[string]interface{} `json:"data"`
	jwt.StandardClaims
}

// JwtToken JWT令牌
type JwtToken struct {
	Token     string `json:"token"`
	ExpiresAt int64  `json:"expires_at"`
}

// JwtValidate JWT 校验
func JwtValidate(tokenString string, secret ...[]byte) *JwtClaims {

	jwtSecret := []byte(config.Conf.JWTSecret)
	if len(secret) > 0 {
		jwtSecret = secret[0]
	}

	token, err := jwt.ParseWithClaims(tokenString, &JwtClaims{}, func(token *jwt.Token) (interface{}, error) {
		return jwtSecret, nil
	})

	if err != nil {
		log.Error("JWT ParseWithClaims Error: %s", err)
		exception.New("Invalid token", 403).Ctx(err.Error()).Throw()
		return nil
	}

	if claims, ok := token.Claims.(*JwtClaims); ok && token.Valid {
		return claims
	}

	exception.New("Invalid token", 403).Ctx(token.Claims).Throw()
	return nil
}

// JwtMake  生成 JWT
// option: {"subject":"<主题>", "audience": "<接收人>", "issuer":"<签发人>", "timeout": "<有效期,单位秒>", "sid":"<会话ID>"}
func JwtMake(id int, data map[string]interface{}, option map[string]interface{}, secret ...[]byte) JwtToken {

	jwtSecret := []byte(config.Conf.JWTSecret)
	if len(secret) > 0 {
		jwtSecret = secret[0]
	}

	now := time.Now().Unix()
	sid := ""
	timeout := int64(3600)
	uid := fmt.Sprintf("%d", id)
	subject := "User Token"
	audience := "Xiang Metadata Admin Panel"
	issuer := fmt.Sprintf("xiang:%d", id)
	if v, has := option["subject"]; has {
		subject = fmt.Sprintf("%v", v)
	}
	if v, has := option["audience"]; has {
		audience = fmt.Sprintf("%v", v)
	}
	if v, has := option["issuer"]; has {
		issuer = fmt.Sprintf("%v", v)
	}
	if v, has := option["sid"]; has {
		sid = fmt.Sprintf("%v", v)
	}
	if v, has := option["timeout"]; has {
		timeout = int64(any.Of(v).CInt())
	}

	expiresAt := now + timeout
	if sid == "" {
		sid = session.ID()
	}

	// 设定会话过期时间 (并写需要加锁，这个逻辑需要优化)
	// session.Global().Expire(time.Duration(timeout) * time.Second)

	claims := &JwtClaims{
		ID:   id,
		SID:  sid, // 会话ID
		Data: data,
		StandardClaims: jwt.StandardClaims{
			Id:        uid,       // 唯一ID
			Subject:   subject,   // 主题
			Audience:  audience,  // 接收人
			ExpiresAt: expiresAt, // 过期时间
			NotBefore: now,       // 生效时间
			IssuedAt:  now,       // 签发时间
			Issuer:    issuer,    // 签发人
		},
	}
	token := jwt.NewWithClaims(jwt.SigningMethodHS256, claims)
	tokenString, err := token.SignedString([]byte(jwtSecret))
	if err != nil {
		exception.New("生成令牌失败", 500).Ctx(err).Throw()
	}
	return JwtToken{
		Token:     tokenString,
		ExpiresAt: expiresAt,
	}
}

// ProcessJwtMake xiang.helper.JwtMake 生成JWT
func ProcessJwtMake(process *process.Process) interface{} {
	process.ValidateArgNums(2)
	id := process.ArgsInt(0)
	data := process.ArgsMap(1)
	option := map[string]interface{}{}
	if process.NumOfArgsIs(3) {
		option = process.ArgsMap(2)
	}
	return JwtMake(id, data, option)
}

// ProcessJwtValidate xiang.helper.JwtValidate 校验JWT
func ProcessJwtValidate(process *process.Process) interface{} {
	process.ValidateArgNums(1)
	tokenString := process.ArgsString(0)
	return JwtValidate(tokenString)
}