import com.auth0.jwt.JWTVerifyException; //导入依赖的package包/类
private void verifyJwtToken(Response response) throws NoSuchAlgorithmException, InvalidKeyException, IOException, SignatureException, JWTVerifyException {
    String cookieContent = response.getCookies().get(HttpHeaders.AUTHORIZATION).getValue();
    assertThat(cookieContent, StringStartsWith.startsWith("Bearer "));
    String jwt = cookieContent.substring(7);

    JWTVerifier jwtVerifier = new JWTVerifier("myJWT4Gr4v1t33_S3cr3t");

    Map<String, Object> mapJwt = jwtVerifier.verify(jwt);

    assertEquals(mapJwt.get("sub"),"[email protected]");

    assertEquals(mapJwt.get("firstname"),"Jane");
    assertEquals(mapJwt.get("iss"),"gravitee-management-auth");
    assertEquals(mapJwt.get("sub"),"[email protected]");
    assertEquals(mapJwt.get("email"),"[email protected]");
    assertEquals(mapJwt.get("lastname"),"Doe");
}
 

import com.auth0.jwt.JWTVerifyException; //导入依赖的package包/类
@Override
public boolean doCredentialsMatch(AuthenticationToken token, AuthenticationInfo info) {
    JsonWebToken jsonWebToken = (JsonWebToken) token;
    JWTVerifier verifier = new JWTVerifier(secret, audience);
    try {
        Map<String, Object> map = verifier.verify(jsonWebToken.getToken());
        SimpleAuthenticationInfo authenticationInfo = (SimpleAuthenticationInfo) info;
        String realmName = authenticationInfo.getPrincipals().getRealmNames().iterator().next();
        SimplePrincipalCollection principals = new SimplePrincipalCollection();
        principals.add(map.get("iss"), realmName);
        authenticationInfo.setPrincipals(principals);
        return true;
    } catch (InvalidKeyException | NoSuchAlgorithmException | IllegalStateException | SignatureException
            | IOException | JWTVerifyException e) {
        log.debug(e.getMessage());
        return false;
    }
}
 

import com.auth0.jwt.JWTVerifyException; //导入依赖的package包/类
private Optional<User> verifyToken(String token) throws IOException, GeneralSecurityException, JWTVerifyException {
  LOGGER.debug("Authenticating token: {}", token);

  final Map<String, Object> claims = service.verify(token);
  final String subject = (String) claims.get(JwtField.subject.id);
  final String email = (String) claims.get(JwtField.email.id);
  return Optional.of(new User(subject, Optional.ofNullable(email)));
}
 

import com.auth0.jwt.JWTVerifyException; //导入依赖的package包/类
public Claim verify(String token, Credential credential) throws Exception {
	JWTVerifier verifier = null;
	verifier = createVerifier(credential, verifier);
	try {
		return buildClaim(token, verifier);
	} catch (JWTVerifyException e) {
		e.printStackTrace();
	}
	return new Claim();

}
 

import com.auth0.jwt.JWTVerifyException; //导入依赖的package包/类
private Claim buildClaim(String token, JWTVerifier verifier)
		throws NoSuchAlgorithmException, InvalidKeyException, IOException, SignatureException, JWTVerifyException {
	final Map<String, Object> claimMap = verifier.verify(token);
	Integer exp = (Integer) claimMap.get("exp");
	Integer nbf = (Integer) claimMap.get("nbf");
	Integer iat = (Integer) claimMap.get("iat");
	Claim claims = new Claim((String) claimMap.get("iss"), (String) claimMap.get("sub"),
			(String) claimMap.get("aud"), 
			(Long) (exp != null ? exp.longValue() : null),
			(Long) (nbf != null ? nbf.longValue() : null), 
			(Long) (iat != null ? iat.longValue() : null),
			(String) claimMap.get("jti"));
	return claims;
}
 

import com.auth0.jwt.JWTVerifyException; //导入依赖的package包/类
public void assertJwtToken(final String... args) {
    final DslParams params = new DslParams(
            args,
            new OptionalParam("cookieMaxAge"),
            new OptionalParam("cookieExpiry"),
            new OptionalParam("jwtTokenExpiry")
    );

    final Cookie cookie = driver().getJtwCookie();

    if (params.hasValue("cookieMaxAge")) {
        assertDuration(params.value("cookieMaxAge"), Duration.ofSeconds(cookie.getMaxAge()));
    }
    if (params.hasValue("cookieExpiry")) {
        assertTime("cookieExpiry", params.value("cookieExpiry"), cookie.getExpiryDate());
    }

    if (params.hasValue("jwtTokenExpiry")) {
        final String jwtToken = cookie.getValue();
        final Map<String, Object> map;
        try {
            map = new JWTConfiguration().buildTokenManager().getJwtVerifier().verify(jwtToken);
        } catch (final NoSuchAlgorithmException | InvalidKeyException | SignatureException | JWTVerifyException | IOException e) {
            throw new RuntimeException("Unable to parse token", e);
        }
        final Date expiryDate = new Date(((int) map.get("exp")) * 1000L);
        assertTime("jwtTokenExpiry", params.value("jwtTokenExpiry"), expiryDate);
    }

}
 

import com.auth0.jwt.JWTVerifyException; //导入依赖的package包/类
private Map<String, Object> decodeJwtToken(final String token, final JwtTokenManager tokenManager) {
    final Map<String, Object> map;
    try {
        map = tokenManager.getJwtVerifier().verify(token);
    } catch (final NoSuchAlgorithmException | JWTVerifyException | SignatureException | IOException | InvalidKeyException e) {
        throw new RuntimeException("Unable to verify existing token", e);
    }
    return map;
}
 

import com.auth0.jwt.JWTVerifyException; //导入依赖的package包/类
public Map<String, Object> verify(String token) throws GeneralSecurityException, IOException, JWTVerifyException {
  return verifier.verify(token);
}
 

import com.auth0.jwt.JWTVerifyException; //导入依赖的package包/类
private void verifyJwtTokenIsNotPresent(Response response) throws NoSuchAlgorithmException, InvalidKeyException, IOException, SignatureException, JWTVerifyException {
    assertNull(response.getCookies().get(HttpHeaders.AUTHORIZATION));
}