91 lines
3.0 KiB
Python
91 lines
3.0 KiB
Python
from pathlib import Path
|
||
from zoneinfo import ZoneInfo
|
||
|
||
import pydash
|
||
from django.conf import settings
|
||
from jwt import JWT, jwk_from_pem
|
||
from jwt.exceptions import JWTDecodeError
|
||
from jwt.utils import get_time_from_int
|
||
from rest_framework import exceptions
|
||
from rest_framework.authentication import BaseAuthentication
|
||
from rest_framework.response import Response
|
||
|
||
|
||
|
||
public_key_pem_公钥 = Path( settings.BASE_DIR ).joinpath( "django_jwt_token/public.pem" ).read_bytes( )
|
||
|
||
instance = JWT( )
|
||
|
||
from rest_framework.permissions import BasePermission
|
||
from rest_framework.exceptions import AuthenticationFailed
|
||
|
||
|
||
|
||
|
||
|
||
class Jwt权限认证( BasePermission ):
|
||
"""自定义JWT认证权限类"""
|
||
|
||
|
||
|
||
def has_permission( self, request, view ):
|
||
"""
|
||
必须实现这个方法，返回 True 表示有权限，False 表示无权限
|
||
:param request: 请求对象
|
||
:param view: 视图对象
|
||
:return: bool
|
||
"""
|
||
# 获取 token（从 Authorization header 或 cookie）
|
||
auth_header = request.headers.get( 'Authorization', '' )
|
||
token = request.data.get( "token", None )
|
||
Authorization = pydash.get( obj=request.headers, path="Authorization" )
|
||
print( "有作用了啦" )
|
||
print( "拿到token了吗?", Authorization )
|
||
# ✅ 正确：使用公钥进行验证
|
||
verifying_key = jwk_from_pem( pem_content=public_key_pem_公钥 )
|
||
|
||
# 解码验证 JWT
|
||
received_message = instance.decode( message=Authorization, key=verifying_key, do_time_check=True )
|
||
print( f"解码后的消息: {received_message}" )
|
||
|
||
|
||
|
||
def has_object_permission( self, request, view, obj ):
|
||
pass
|
||
|
||
|
||
|
||
|
||
|
||
class Jwt身份认证( BaseAuthentication ):
|
||
|
||
|
||
def authenticate( self, request ):
|
||
try:
|
||
Authorization = request.headers.get( "Authorization", "" )
|
||
# ✅ 正确：使用公钥进行验证
|
||
verifying_key = jwk_from_pem( pem_content=public_key_pem_公钥 )
|
||
# 解码验证 JWT
|
||
received_message = instance.decode( message=Authorization, key=verifying_key, do_time_check=True )
|
||
过期时间戳 = pydash.get( obj=received_message, path="exp" )
|
||
time_过期日间 = get_time_from_int( 过期时间戳 ).astimezone( tz=ZoneInfo( key="Asia/Shanghai" ) )
|
||
print( "过期的时间为:", time_过期日间, received_message )
|
||
return received_message, time_过期日间,
|
||
except exceptions.AuthenticationFailed:
|
||
msg = "==============="
|
||
raise "认证失败"
|
||
except JWTDecodeError as e:
|
||
print( '999999999999999999999', str( e ) )
|
||
# 如果你想保留原始异常链
|
||
raise AuthenticationFailed( f"Token无效: {str( e )}" )
|
||
# raise f"Token无效: {str( e )}"
|
||
|
||
|
||
|
||
def authenticate_header( self, request ):
|
||
pass
|
||
"""
|
||
返回 HTTP 401 响应时，告诉客户端应该使用哪种认证方式
|
||
"""
|
||
return 'Bearer'
|