{"id":907,"date":"2026-03-10T00:24:38","date_gmt":"2026-03-10T00:24:38","guid":{"rendered":"https:\/\/blog.nimail.cn\/?p=907"},"modified":"2026-03-10T00:24:38","modified_gmt":"2026-03-10T00:24:38","slug":"2026%e5%b9%b4%e4%bc%81%e4%b8%9a%e7%ba%a7jwt%e8%a7%a3%e6%9e%90%e4%b8%8e%e5%9c%a8%e7%ba%bf%e8%a7%a3%e7%a0%81%e5%ae%9e%e6%88%98%e8%af%a6%e8%a7%a3","status":"publish","type":"post","link":"https:\/\/blog.nimail.cn\/best-articles\/2026%e5%b9%b4%e4%bc%81%e4%b8%9a%e7%ba%a7jwt%e8%a7%a3%e6%9e%90%e4%b8%8e%e5%9c%a8%e7%ba%bf%e8%a7%a3%e7%a0%81%e5%ae%9e%e6%88%98%e8%af%a6%e8%a7%a3\/","title":{"rendered":"2026\u5e74\u4f01\u4e1a\u7ea7JWT\u89e3\u6790\u4e0e\u5728\u7ebf\u89e3\u7801\u5b9e\u6218\u8be6\u89e3"},"content":{"rendered":"

\u4e00\u3001\u4e3a\u4ec0\u4e48\u8981\u5173\u6ce8 JWT\uff08jwt\u662f\u4ec0\u4e48\uff09<\/h2>\n

\u4f5c\u4e3a\u540e\u7aef\u4e0e\u524d\u7aef\u901a\u4fe1\u4e2d\u5e38\u89c1\u7684\u8f7b\u91cf\u7ea7\u51ed\u8bc1\uff0cJWT\uff08JSON Web Token\uff09<\/strong>\u5728\u5355\u70b9\u767b\u5f55\u3001\u5fae\u670d\u52a1\u9274\u6743\u3001\u79fb\u52a8\u7aef TOKEN \u4f20\u9012\u4e2d\u88ab\u5e7f\u6cdb\u4f7f\u7528\u3002\u5f88\u591a\u540c\u4e8b\u4f1a\u95ee\uff1aJWT\u662f\u4ec0\u4e48<\/em>\uff1f\u7b80\u8a00\u4e4b\uff0cJWT \u662f\u7531 Header\u3001Payload\u3001Signature<\/strong> \u4e09\u90e8\u5206\u7ec4\u6210\u7684\u5b57\u7b26\u4e32\uff0c\u65b9\u4fbf\u5728\u65e0\u72b6\u6001\u670d\u52a1\u95f4\u643a\u5e26\u7528\u6237\u4fe1\u606f\u548c\u8fc7\u671f\u63a7\u5236\u3002<\/p>\n

\n \u6ce8\u610f\uff1aJWT \u672c\u8eab\u5e76\u4e0d\u662f\u52a0\u5bc6\uff0c\u800c\u662f\u7b7e\u540d<\/strong>\u6216\u53ef\u9009\u7684\u52a0\u5bc6\uff1b\u4e0d\u8981\u628a\u654f\u611f\u4fe1\u606f\u653e\u5728\u672a\u52a0\u5bc6\u7684 Payload \u4e2d\u3002\n<\/div>\n

\u6838\u5fc3\u7ed3\u6784\u5feb\u901f\u56de\u987e<\/h3>\n
\n
\n

\u4e00\u4e2a\u5178\u578b\u7684 jwt token<\/span> \u5f62\u5982 xxxxx.yyyyy.zzzzz<\/code>\uff0c\u4e09\u6bb5\u901a\u8fc7\u201c.\u201d\u5206\u9694\u3002\u524d\u4e24\u6bb5\u662f Base64URL \u7f16\u7801\uff0c\u53ef\u4ee5\u5728\u7ebf\u89e3\u6790\u67e5\u770b\u5185\u5bb9\uff0c\u7b2c\u4e09\u6bb5\u662f\u7b7e\u540d\u7528\u4e8e\u6821\u9a8c\u5b8c\u6574\u6027\u3002<\/p>\n<\/p><\/div>\n<\/div>\n

\u7b80\u5355\u8868\u683c\u5e2e\u52a9\u8bb0\u5fc6<\/h4>\n
\n\n\n\n\n\n\n\n
\u5b57\u6bb5<\/th>\n\u8bf4\u660e<\/th>\n<\/tr>\n<\/thead>\n
Header<\/td>\n\u58f0\u660e\u7b7e\u540d\u7b97\u6cd5\uff08\u5982 HS256\uff09\u548c\u7c7b\u578b\uff08JWT\uff09<\/td>\n<\/tr>\n
Payload<\/td>\n\u627f\u8f7d\u7528\u6237\u6570\u636e\uff08sub\u3001exp\u3001iat \u7b49\uff09\uff0c\u6ce8\u610f\u4e0d\u53ef\u5b58\u653e\u660e\u6587\u654f\u611f\u4fe1\u606f<\/td>\n<\/tr>\n
Signature<\/td>\n\u57fa\u4e8e Header+Payload \u548c\u5bc6\u94a5\u8ba1\u7b97\u7684\u7b7e\u540d\uff0c\u7528\u4e8e\u6821\u9a8c TOKEN \u662f\u5426\u88ab\u7be1\u6539<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n

\u4e8c\u3001JWT\u5728\u7ebf\u89e3\u6790\u4e0e\u5de5\u5177\u5b9e\u8df5\uff08\u4ee5 nimail \u793a\u4f8b\uff09<\/h2>\n

\u9047\u5230\u672a\u77e5\u7684 TOKEN\uff0c\u7b2c\u4e00\u6b65\u7ecf\u5e38\u662f\u628a\u5b83\u653e\u8fdb\u5728\u7ebf\u89e3\u6790\u5de5\u5177\u67e5\u770b\u7ed3\u6784\u3002\u63a8\u8350\u4e00\u4e2a\u5e38\u7528\u793a\u4f8b\uff1animail \u7684 JWT \u683c\u5f0f\u5de5\u5177<\/a>\u3002\u8fd9\u4e2a\u9875\u9762\u53ef\u4ee5\u628a JWT\u5728\u7ebf\u89e3\u6790<\/strong> \u7684\u4e09\u6bb5\u76f4\u63a5\u4ee5\u53ef\u8bfb JSON \u5c55\u793a\uff0c\u4fbf\u4e8e\u5feb\u901f\u5b9a\u4f4d\u95ee\u9898\uff08\u8fc7\u671f\u65f6\u95f4\u3001\u7b7e\u53d1\u8005\u3001scope \u7b49\uff09\u3002<\/p>\n

\n \u5b9e\u6218\u6280\u5de7\uff1a\u628a\u670d\u52a1\u8fd4\u56de\u7684 TOKEN \u590d\u5236\u5230 nimail \u5de5\u5177\u4e2d\uff0c\u4f18\u5148\u67e5\u770b exp<\/strong>\uff08\u8fc7\u671f\u65f6\u95f4\uff09\u4e0e iss\/aud<\/strong>\uff08\u7b7e\u53d1\u4e0e\u53d7\u4f17\uff09\u662f\u5426\u7b26\u5408\u9884\u671f\u3002\n<\/div>\n

\u5982\u4f55\u5224\u65ad\u662f jwt \u89e3\u5bc6 \u8fd8\u662f jwt \u89e3\u7801<\/h3>\n

\u5f00\u53d1\u4e2d\u5e38\u628a jwt\u89e3\u7801<\/strong> \u4e0e jwt\u89e3\u5bc6<\/strong> \u6df7\u6dc6\uff1a\u89e3\u7801<\/strong>\uff08decode\uff09\u901a\u5e38\u6307 Base64URL \u89e3\u7801 Header \u548c Payload\uff0c\u89e3\u5bc6<\/strong>\uff08decrypt\uff09\u4ec5\u5728\u4f7f\u7528 JWE\uff08\u52a0\u5bc6 JWT\uff09\u65f6\u5b58\u5728\u3002\u7edd\u5927\u591a\u6570\u573a\u666f\u6211\u4eec\u505a\u7684\u662f jwt\u89e3\u6790 \/ TOKEN\u89e3\u6790<\/strong>\uff0c\u5373\u67e5\u770b\u7ed3\u6784\u4e0e\u7b7e\u540d\u9a8c\u8bc1\u3002<\/p>\n

\u4e09\u3001\u7528 Python \u5feb\u901f\u89e3\u6790\uff08\u793a\u4f8b\u4ee3\u7801\uff09<\/h2>\n

\u4e0b\u9762\u7ed9\u51fa\u4e00\u4e2a\u5e38\u89c1\u7684 Python \u793a\u4f8b\uff0c\u5c55\u793a\u5982\u4f55\u5728\u4e0d\u6821\u9a8c\u7b7e\u540d\u7684\u60c5\u51b5\u4e0b\u67e5\u770b Payload\uff08\u7528\u4e8e\u8c03\u8bd5\uff09\uff0c\u4ee5\u53ca\u5982\u4f55\u6821\u9a8c\u7b7e\u540d\u3002<\/p>\n

# pip install pyjwt\nimport jwt\nfrom jwt import InvalidSignatureError\n\ntoken = \"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjMifQ.sGN...\"\n\n# \u4e0d\u6821\u9a8c\u7b7e\u540d\uff0c\u4ec5\u89e3\u7801\uff08\u8c03\u8bd5\u7528\uff09\ntry:\n    payload = jwt.decode(token, options={\"verify_signature\": False})\n    print(\"Payload (no verify):\", payload)\nexcept Exception as e:\n    print(\"Decode error:\", e)\n\n# \u6821\u9a8c\u7b7e\u540d\uff08\u9700\u8981\u77e5\u9053 secret \u6216\u516c\u94a5\uff09\nsecret = \"your-secret\"\ntry:\n    payload_verified = jwt.decode(token, secret, algorithms=[\"HS256\"])  # \u4f1a\u629b\u51fa\u5f02\u5e38\u5982\u679c\u7b7e\u540d\u6216\u8fc7\u671f\n    print(\"Verified payload:\", payload_verified)\nexcept InvalidSignatureError:\n    print(\"Signature invalid\")\nexcept Exception as e:\n    print(\"Verify error:\", e)\n<\/code><\/pre>\n
\n  \u5efa\u8bae\uff1a\u5728\u751f\u4ea7\u73af\u5883\u4e2d\u8bf7\u59cb\u7ec8<\/strong>\u9a8c\u8bc1\u7b7e\u540d\u5e76\u6821\u9a8c\u8fc7\u671f\u65f6\u95f4\uff1b\u8c03\u8bd5\u65f6\u7528 verify_signature=False<\/code> \u53ef\u4ee5\u5feb\u901f\u67e5\u770b\u5185\u5bb9\uff0c\u4f46\u5343\u4e07\u4e0d\u8981\u5728\u6b63\u5f0f\u9274\u6743\u4e2d\u5ffd\u7565\u9a8c\u8bc1\u3002\n<\/div>\n
\u5e38\u89c1\u95ee\u9898\u901f\u67e5<\/h4>\n