Python中怎样实现JWT认证？

import jwt
from datetime import datetime, timedelta

# 生成JWT
def generate_jwt(user_id):
    payload = {
        'user_id': user_id,
        'exp': datetime.utcnow() + timedelta(hours=1)  # 令牌有效期1小时
    }
    secret_key = 'your-secret-key'  # 请使用安全的密钥
    token = jwt.encode(payload, secret_key, algorithm='HS256')
    return token

# 验证JWT
def verify_jwt(token):
    secret_key = 'your-secret-key'
    try:
        payload = jwt.decode(token, secret_key, algorithms=['HS256'])
        return payload['user_id']
    except jwt.ExpiredSignatureError:
        return 'Token has expired'
    except jwt.InvalidTokenError:
        return 'Invalid token'

# 使用示例
user_id = 123
token = generate_jwt(user_id)
print(f'Generated Token: {token}')

verified_user_id = verify_jwt(token)
print(f'Verified User ID: {verified_user_id}')

from flask import Flask, request, jsonify
from functools import wraps

app = Flask(__name__)

def token_required(f):
    @wraps(f)
    def decorated(*args, **kwargs):
        token = request.headers.get('Authorization')
        if not token:
            return jsonify({'message': 'Token is missing!'}), 401
        try:
            data = jwt.decode(token, 'your-secret-key', algorithms=['HS256'])
        except:
            return jsonify({'message': 'Token is invalid!'}), 401
        return f(*args, **kwargs)
    return decorated

@app.route('/protected', methods=['GET'])
@token_required
def protected():
    return jsonify({'message': 'This is a protected route'})

if __name__ == '__main__':
    app.run(debug=True)