JWT-实现token用户身份验证机制

//生成token
public function createJwt($userId = 'zq')
{
    $key = md5('heghdrwgsd'); //jwt的签发密钥，验证token的时候需要用到
    $time = time(); //签发时间
    $expire = $time + 100; //过期时间
    $token = array(
        "user_id" => $userId,
        "iss" => "https://www.phpvan.com/",//签发组织
        "aud" => "zhangqi", //签发作者
        "iat" => $time,
        "nbf" => $time,
        "exp" => $expire
    );
    $jwt = JWT::encode($token, $key, 'HS256');
    return $jwt;
}

//校验jwt权限API
public function verifyJwt($jwt = '')
{
    $key = md5('heghdrwgsd');
    try {
        $jwtAuth = json_encode(JWT::decode($jwt, new Key($key, 'HS256')));
        $authInfo = json_decode($jwtAuth, true);
        $msg = [];
        if (!empty($authInfo['user_id'])) {
            $msg = [
                'status' => 1001,
                'msg' => 'Token验证通过'
            ];
        } else {
            $msg = [
                'status' => 1002,
                'msg' => 'Token验证不通过,用户不存在'
            ];
        }
        return $msg;
    }  catch (\Firebase\JWT\ExpiredException $e) {
        echo json_encode([
            'status' => 1003,
            'msg' => 'Token过期'
        ]);
        exit;
    } catch (\Exception $e) {
        echo json_encode([
            'status' => 1002,
            'msg' => 'Token无效'
        ]);
        exit;
    }
}