1、使用hutool來做
1、先去jwt解密/加密 - bejson在線工具弄個公私鑰
2、導入hutool maven
<dependency><groupId>cn.hutool</groupId><artifactId>hutool-all</artifactId><version>5.7.22</version></dependency><dependency><groupId>org.bouncycastle</groupId><artifactId>bcprov-jdk15to18</artifactId><version>1.68</version></dependency>3、代碼
public class JwtUtil {public static void main(String[] args) {System.out.println("jwt:" + genEs256Jwt("123"));}static String es256PrimaryKey = "xxx";static String es256PublicKey = "xxx";// 生成jwt@SneakyThrowspublic static String genEs256Jwt(String username){byte[] privateKeyBytes = Base64.decode(es256PrimaryKey);KeyFactory keyFactory = KeyFactory.getInstance("EC");PKCS8EncodedKeySpec keySpec = new PKCS8EncodedKeySpec(privateKeyBytes);PrivateKey privateKey = keyFactory.generatePrivate(keySpec);JWTSigner signer = JWTSignerUtil.es256(privateKey);String token = JWT.create().setPayload("username", username).setPayload("iss", "xxx")// 簽發時間.setPayload("timeStamp",new Date().getTime()).setKey(secret).setSigner(signer).sign();}4、解密
@SneakyThrowspublic static String parseEs256Jwt(String token){Security.addProvider(new BouncyCastleProvider());KeyFactory keyFactory = KeyFactory.getInstance("ECDH", "BC");byte[] publicKeyBytes = Base64.decode(es256PublicKey);X509EncodedKeySpec pubX509 = new X509EncodedKeySpec(publicKeyBytes);PublicKey publicKey = keyFactory.generatePublic(pubX509);JWTSigner signer = JWTSignerUtil.es256(publicKey);JWT jwt = JWT.of(token).setSigner(signer);return jwt.getPayload("username").toString();}5、ps：hutool的在jwt解密/加密 - bejson在線工具上校驗不過去，只能自己和自己校驗玩
2、使用io.jsonwebtoken(推薦)
1、導入maven
<dependency><groupId>io.jsonwebtoken</groupId><artifactId>jjwt-impl</artifactId><version>0.11.1</version></dependency><dependency><groupId>io.jsonwebtoken</groupId><artifactId>jjwt-api</artifactId><version>0.11.1</version></dependency><dependency><groupId>io.jsonwebtoken</groupId><artifactId>jjwt-jackson</artifactId><version>0.11.1</version></dependency>2、代碼
@SneakyThrowspublic static String genEs256Jwt(String username){Security.addProvider(new BouncyCastleProvider());byte[] privateKeyBytes = Base64.decode(es256PrimaryKey);
// KeyFactory keyFactory = KeyFactory.getInstance("EC");KeyFactory keyFactory = KeyFactory.getInstance("ECDH", "BC");PKCS8EncodedKeySpec keySpec = new PKCS8EncodedKeySpec(privateKeyBytes);PrivateKey privateKey = keyFactory.generatePrivate(keySpec);Claims claims = Jwts.claims();claims.put("username", username);String token = Jwts.builder().setClaims(claims).setIssuer("xxx").signWith(privateKey,SignatureAlgorithm.ES256)
// .signWith(privateKey, SignatureAlgorithm.ES256).compact();return token;}3、解密
@SneakyThrowspublic static String parseEs256Jwt(String token){Security.addProvider(new BouncyCastleProvider());KeyFactory keyFactory = KeyFactory.getInstance("ECDH", "BC");byte[] publicKeyBytes = Base64.decode(es256PublicKey);X509EncodedKeySpec pubX509 = new X509EncodedKeySpec(publicKeyBytes);PublicKey publicKey = keyFactory.generatePublic(pubX509);Jws<Claims> jwt = null;String username = null;try {jwt = Jwts.parserBuilder().setSigningKey(publicKey).build().parseClaimsJws(token);username = jwt.getBody().get("username").toString();} catch (ExpiredJwtException e) {e.printStackTrace();} catch (UnsupportedJwtException e) {e.printStackTrace();} catch (MalformedJwtException e) {e.printStackTrace();} catch (SignatureException e) {e.printStackTrace();} catch (IllegalArgumentException e) {e.printStackTrace();}return username;}參考：JWT Token 使用 RS256 和 ES256 簽名_jwt解碼es256解密-CSDN博客
)
