如何使用会话Cookie和Java实现JWT身份验证

 //定义JWT的有效时长七天
 private static final long EXPIRE_TIME = 60 * 1000 * 60 * 24 * 7;
 //签发人
 private static String ISSUER = "K_ang";
 
 private static final String SING = K*&^A%$#N@!G;

 
 public static String getToken(Map<String, String> map) {

  //设置过期时间
  Date date = null;
  try {
   date = new Date(System.currentTimeMillis() + EXPIRE_TIME);

   //创建token
   JWTCreator.Builder builder = JWT.create()
     .withIssuer(ISSUER)
     .withExpiresAt(date);
   //添加信息
   map.forEach((k, v) -> {
    builder.withClaim(k, v);
   });
   return builder.sign(AlGorithm.HMac256(SING));
  } catch (Exception e) {
   e.printStackTrace();
   return null;
  }
 }

 
 public static boolean verify(String token, String userNo) {
  try {
   //设置加密算法
   JWTVerifier verifier = JWT.require(Algorithm.HMAC256(SING)).withClaim("userNo", userNo).build();
   //校验token
   DecodedJWT jwt = verifier.verify(token);
   return true;
  } catch (Exception e) {
   return false;
  }


 }

 
 public static String getTokenInfo(String token) {
  DecodedJWT decode = JWT.decode(token);
  return decode.getClaim("userNo").asString();
 }
}

@PostMapping("/login")
 public Result login(@PathParam("empNo") String empNo, @PathParam("empPassWord") String empPassword) {
  if (empNo == null || "".equals(empNo)) {
   return ResultUtil.error(103, "请输入用户名,用户名不能为空");
  }
  if (empPassword == null || "".equals(empPassword)) {
   return ResultUtil.error(103, "请输入密码,密码不能为空");
  }
  Emp emp = empService.login(empNo, empPassword);
  if (emp == null) {
   return ResultUtil.error(103, "用户不存在,获取token失败");
  }
  if (emp.getEmpPassword() == null || !emp.getEmpPassword().equals(empPassword)) {
   return ResultUtil.error(103, "密码错误,获取token失败");
  }
  //正常token
  String token = JwtUtils.sign(empNo, empPassword);
  emp.setToken(token); 
  return ResultUtil.success(200, "登录成功", emp);
 }