??

?? ? ????? ???? ?? ??? ??? ?? ?????. JWT(JSON ? ??)? ??? ??? ???? ?? ?? ??? ?????. ?? ??? ?????? JWT? ????, ??? ?????, Golang?? ???? ??? ???????.

JWT? ??????

JSON ? ??(JWT)? ? ??? ?? ??? ??? ???? ???? ?? URL? ??? ??? ?? ?? ?????. ????? API ? ?? ????? ???? ???? ??? ???? ? ?????.

JWT? ??

JWT? ?(.)?? ??? ? ???? ?????.

<code>Header.Payload.Signature</code>

?:

<code>eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiYWRtaW4iOnRydWUsImlhdCI6MTUxNjIzOTAyMn0.reGQzG3OKdoIMWLDKOZ4TICJit3EW69cQE72E2CfzRE</code>

? ??? ??? ????.

1. ??: ?? ??(JWT) ? ?? ????(HS256)? ?????.

<code>{
  "alg": "HS256",
  "typ": "JWT"
}</code>

2. ????: ???(ID, ?? ?? ??? ?? ??? ???)? ?????.

<code>{
    "sub": "1234567890",
    "name": "John Doe",
    "admin": true,
    "iat": 1516239022
}</code>

3. ??: ??? ?? ????? ???? ??? ???? ?????. ?? ?? ??? ???????.

?? ?? ??:

• ???? ??? ???? ??:

<code>  base64UrlEncode(header) + "." + base64UrlEncode(payload)</code>

• ??? ??:
  • ?? ? ?? ?? ?? ???? ??? ?? ????(?: HMACSHA256, RS256)? ?????.
• ?? ??: ?? JWT?
? ???.

<code>  header.payload.signature</code>

JWT ?? ??

1. ?????? ??? ?? ??? ??? ????.
2. ??? ?? ??? JWT? ???? ?????? ?????.
3. ?????? JWT? ?????(?: localStorage ?? ??).
4. ?? ??? ???? ?????? Authorization ??? JWT? ?????: Authorization: Bearer
5. ??? ?? ??? ???? JWT? ???? ?????.
   • ??? ??? ????? ???? ??? ?? ?????.
   • ?? ??? ??? ??? ??? ?????.

Golang?? JWT ??

Golang ???? ??? golang-jwt/jwt ?????? ???? JWT? ??? ? ????. ? ?????? JWT ??, ?? ? ??? ??? ?? ??? ??? ?????. ???? ?? ? ????.

??? JWT? ????? ?? ?? ??, ?? ?? ??, ?? ??? ??? ?? ???? ??? ??? ??? ????. ?? ????? ?? golang-jwt? ??? ???? ??? ?? ???? ??????. ???? ? ???? ? ? ????. ??? ??? ?? JWT ???? ???? ??? ????.

package main

import (
    "context"
    "fmt"
    "log"
    "time"

    "github.com/golang-jwt/jwt/v5"
    jwtutil "github.com/kittipat1413/go-common/util/jwt"
)

type MyCustomClaims struct {
    jwt.RegisteredClaims
    UserID string `json:"uid"`
}

func main() {
    ctx := context.Background()
    signingKey := []byte("super-secret-key")
    manager, err := jwtutil.NewJWTManager(jwtutil.HS256, signingKey)
    if err != nil {
        log.Fatalf("Failed to create JWTManager: %v", err)
    }

    // Prepare custom claims
    claims := &MyCustomClaims{
        RegisteredClaims: jwt.RegisteredClaims{
            ExpiresAt: jwt.NewNumericDate(time.Now().Add(15 * time.Minute)),
            Issuer:    "example-HS256",
            Subject:   "example-subject",
        },
        UserID: "abc123",
    }

    // Create the token
    tokenStringHS256, err := manager.CreateToken(ctx, claims)
    if err != nil {
        log.Fatalf("Failed to create token: %v", err)
    }
    fmt.Println("Generated Token:", tokenStringHS256)

    // Validate the token
    parsedClaims := &MyCustomClaims{}
    err = manager.ParseAndValidateToken(ctx, tokenStringHS256, parsedClaims)
    if err != nil {
        log.Fatalf("Failed to validate token: %v", err)
    }

    fmt.Printf("Token is valid! UserID: %s, Issuer: %s\n", parsedClaims.UserID, parsedClaims.Issuer)
}

JWT ?? ??

1. HTTPS ??: ?? ?? ??? ?? ??? ?????.
2. ?? ?? ??: ?? ??? ????? ???? ???? ?????.
3. ? ??: ?? ??? ? ???? ???? ?? ???? ?????.
4. ????? ??? ???? ???? ???. ???? ?? ??? ?????.
5. ???? ?? ??: ??? ???? ????? JWT? ???? ??? ??????.

?? ?

JWT? ??? ?? ??? ??? ?? ??? ?????. ??? ??? ???? ???? ????? JWT? API ? ?? ???? ??????. jwt-go? ?? ?????? ???? Golang ?????? JWT? ?? ??? ? ????.

?? ?? ?? ?????? ??

? ??? ??? ???? ?? ? ? ????! ??? ??? ?? ???? ??? ???? ??? ??? ???? ? ??? ???. ??

? ??? Golang? JWT ??: ?? API? ?? ??? ???? ?? ?????. ??? ??? PHP ??? ????? ?? ?? ??? ?????!