PHP customizes the token class and puts the generated token in the Authorization of the http request header.

The content of this article is about the code of php customizing the token class and placing the generated token in the Authorization of the http request header. It has certain reference value. Friends in need can refer to it. I hope It will help you.

When I was using laravel to write something today, I needed to interact with the front-end. I saw jwt (json web token), so I wanted to try to write a simple token class. The token stores member ids and members. Permissions, when interacting with the front end, put the generated token in the Authorization of the http request header, organized as follows:

<?php
namespace App\Http\Controllers\Auth;
use Illuminate\Http\Request;
use App\Http\Controllers\Controller;
class TokenController extends Controller{
    /**
     * header
     * @var array
     */
    private static $header = [        
    "type" => "token",        
    "alg"  => "HS256"
    ];    /**
     * create payload
     * @param $memberId
     * @param $permission
     * @return array
     */
    private static function payload($memberId, $permission)
    {
        return [            
        "iss"       => "http://api.creatshare.com",            
        "iat"       => $_SERVER[&#39;REQUEST_TIME&#39;],           
         "exp"       => $_SERVER[&#39;REQUEST_TIME&#39;] + 7200,            
         "GivenName" => "CreatShare",            
         "memberId"  => $memberId,            
         "permission"=> $permission
        ];
    }    /**
     * encode data
     * @param $data
     * @return string
     */
    private static function encode($data)
    {
        return base64_encode(json_encode($data));
    }    /**
     * generate a signature
     * @param $header
     * @param $payload
     * @param string $secret
     * @return string
     */
    private static function signature($header, $payload, $secret = &#39;secret&#39;)
    {
        return hash_hmac(&#39;sha256&#39;, $header.$payload, $secret);
    }    /**
     * generate a token
     * @param $memberId
     * @param $permission
     * @return string
     */
    public static function createToken($memberId, $permission)
    {
        $header = self::encode(self::$header);        
        $payload = self::encode(self::payload($memberId, $permission));        
        $signature = self::signature($header, $payload);        
        return $header . &#39;.&#39; .$payload . &#39;.&#39; . $signature;
    }    /**
     * check a token
     * @param $jwt
     * @param string $key
     * @return array|string
     */
    public static function checkToken($jwt, $key = &#39;secret&#39;)
    {
        $token = explode(&#39;.&#39;, $jwt);        
        if (count($token) != 3)           
         return &#39;token invalid&#39;;        
         list($header64, $payload64, $sign) = $token;        
         if (self::signature($header64 , $payload64) !== $sign)            
         return &#39;token invalid&#39;;        
         $header = json_decode(base64_decode($header64), JSON_OBJECT_AS_ARRAY);        
         $payload = json_decode(base64_decode($payload64), JSON_OBJECT_AS_ARRAY);        
         if ($header[&#39;type&#39;] != &#39;token&#39; || $header[&#39;alg&#39;] != &#39;HS256&#39;)            
         return &#39;token invalid&#39;;        
         if ($payload[&#39;iss&#39;] != &#39;http://api.creatshare.com&#39; || $payload[&#39;GivenName&#39;] != &#39;CreatShare&#39;)            
         return &#39;token invalid&#39;;        
         if (isset($payload[&#39;exp&#39;]) && $payload[&#39;exp&#39;] < time())            
         return &#39;timeout&#39;;        
         return [           
          &#39;memberId&#39; => $payload[&#39;memberId&#39;],            
         &#39;permission&#39; =>$payload[&#39;permission&#39;]
        ];
    }    /**
     * get a token
     * @return null
     */
    public static function getToken()
    {
        $token = null;        
        if (isset($_SERVER[&#39;HTTP_AUTHORIZATION&#39;]))            
        $token = $_SERVER[&#39;HTTP_AUTHORIZATION&#39;];        
        return $token;
    }
}

$token = Token::createToken($member_id, $member_permission); //创建一个
token$token = Token::getToken();    //从http请求头获取
token$result = Token::checkToken(); //解析token

Related recommendations:

php xml operation class (customized)

PHP implements customizable style paging classes, php custom style paging

Custom classes in php Automatic file loading

The above is the detailed content of PHP customizes the token class and puts the generated token in the Authorization of the http request header.. For more information, please follow other related articles on the PHP Chinese website!