golang框架开发实战问答录：疑难问题汇总及解答

import (
    "crypto/rsa"
    "crypto/x509"
    "encoding/pem"
    "errors"
    "fmt"

    "github.com/dgrijalva/jwt-go"
)

func createJWT(claims jwt.MapClaims, keyFile string) (string, error) {
    // 从文件中读取私钥
    privateKey, err := getPrivateKey(keyFile)
    if err != nil {
        return "", err
    }

    // 创建一个新的 JWT 令牌
    token := jwt.New(jwt.SigningMethodRS256)
    token.Claims = claims

    // 用私钥签名令牌
    signedToken, err := token.SignedString(privateKey)
    if err != nil {
        return "", err
    }

    return signedToken, nil
}

func getPrivateKey(filePath string) (*rsa.PrivateKey, error) {
    bytes, err := ioutil.ReadFile(filePath)
    if err != nil {
        return nil, err
    }

    block, _ := pem.Decode(bytes)
    if block == nil {
        return nil, errors.New("private key not found")
    }

    priv, err := x509.ParsePKCS8PrivateKey(block.Bytes)
    if err != nil {
        return nil, err
    }

    return priv.(*rsa.PrivateKey), nil
}

import (
    "fmt"
    "net/http"

    "github.com/dgrijalva/jwt-go"
)

func jwtMiddleware(next http.Handler) http.Handler {
    return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
        tokenString := r.Header.Get("Authorization")
        token, err := jwt.Parse(tokenString, func(token *jwt.Token) (interface{}, error) {
            if _, ok := token.Method.(*jwt.SigningMethodRSA); !ok {
                return nil, fmt.Errorf("invalid signing method")
            }
            keyFile := "path/to/public.pem"
            publicKey, err := getPublicKey(keyFile)
            if err != nil {
                return nil, err
            }
            return publicKey, nil
        })
        if err != nil {
            // 处理错误
        }

        next.ServeHTTP(w, r)
    })
}

func getPublicKey(filePath string) (*rsa.PublicKey, error) {
    bytes, err := ioutil.ReadFile(filePath)
    if err != nil {
        return nil, err
    }

    block, _ := pem.Decode(bytes)
    if block == nil {
        return nil, errors.New("public key not found")
    }

    pub, err := x509.ParsePKIXPublicKey(block.Bytes)
    if err != nil {
        return nil, err
    }

    return pub.(*rsa.PublicKey), nil
}