{
"用戶名": "admin",
"角色": "超級(jí)管理員",
"到期時(shí)間": "2019-07-13 00:00:00"
}

Authorization: Bearer <token>

composer require lcobucci/jwt 3.3

<?php
namespace tools\jwt;

use Lcobucci\JWT\Builder;
use Lcobucci\JWT\Parser;
use Lcobucci\JWT\Signer\Hmac\Sha256;
use Lcobucci\JWT\ValidationData;

/**
 * Created by PhpStorm.
 * User: asus
 * Date: 2019/4/5
 * Time: 13:02
 */
class Token
{
    private static $_config = [
        'audience' => 'http://www.pyg.com',//接收人
        'id' => '3f2g57a92aa',//token的唯一標(biāo)識(shí)，這里只是一個(gè)簡(jiǎn)單示例
        'sign' => 'pinyougou',//簽名密鑰
        'issuer' => 'http://adminapi.pyg.com',//簽發(fā)人
        'expire' => 3600*24 //有效期
    ];

    //生成token
    public static function getToken($user_id){

        //簽名對(duì)象
        $signer = new Sha256();
        //獲取當(dāng)前時(shí)間戳
        $time = time();
        //設(shè)置簽發(fā)人、接收人、唯一標(biāo)識(shí)、簽發(fā)時(shí)間、立即生效、過(guò)期時(shí)間、用戶id、簽名
        $token = (new Builder())->issuedBy(self::$_config['issuer'])
            ->canOnlyBeUsedBy(self::$_config['audience'])
            ->identifiedBy(self::$_config['id'], true)
            ->issuedAt($time)
            ->canOnlyBeUsedAfter($time-1)
            ->expiresAt($time + self::$_config['expire'])
            ->with('user_id', $user_id)
            ->sign($signer, self::$_config['sign'])
            ->getToken();
        return (string)$token;
    }

    //從請(qǐng)求信息中獲取token令牌
    public static function getRequestToken()
    {
        if (empty($_SERVER['HTTP_AUTHORIZATION'])) {
            return false;
        }

        $header = $_SERVER['HTTP_AUTHORIZATION'];
        $method = 'bearer';
        //去除token中可能存在的bearer標(biāo)識(shí)
        return trim(str_ireplace($method, '', $header));
    }

    //從token中獲取用戶id （包含token的校驗(yàn)）
    public static function getUserId($token = null)
    {
        $user_id = null;

        $token = empty($token)?self::getRequestToken():$token;

        if (!empty($token)) {
            //為了注銷token 加以下if判斷代碼
            $delete_token = cache('delete_token') ?: [];
            if(in_array($token, $delete_token)){
                //token已被刪除（注銷）
                return $user_id;
            }
            $token = (new Parser())->parse((string) $token);
            //驗(yàn)證token
            $data = new ValidationData();
            $data->setIssuer(self::$_config['issuer']);//驗(yàn)證的簽發(fā)人
            $data->setAudience(self::$_config['audience']);//驗(yàn)證的接收人
            $data->setId(self::$_config['id']);//驗(yàn)證token標(biāo)識(shí)

            if (!$token->validate($data)) {
                //token驗(yàn)證失敗
                return $user_id;
            }

            //驗(yàn)證簽名
            $signer = new Sha256();
            if (!$token->verify($signer, self::$_config['sign'])) {
                //簽名驗(yàn)證失敗
                return $user_id;
            }
            //從token中獲取用戶id
            $user_id = $token->getClaim('user_id');
        }

        return $user_id;
    }
}

RewriteCond %{HTTP:Authorization} ^(.+)$
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]