跳到主要内容

access_token 的异同点

v2v1
格式标准 jwt非标准 jwt
加密方式非对称加密对称加密
加密协议ES256HS256
加密 key公私钥定时轮换每个环境独立密钥
公钥查看公钥无
分布式验证支持不支持
开放性开放无

v2 access_token 示例​

eyJhbGciOiJSUzI1NiIsImtpZCI6IjlkMWRjMzFlLWI0ZDAtNDQ4Yi1hNzZmLWIwY2M2M2Q4MTQ5OCJ9.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.j_9x0qvfZv03DT87O-QWT3TWqrGmI87TS1GTakfCqAeMCGGBZEX6WKgz5jsLcCj4xsEdGiVh-OIA1Ssb_0qci4U-2b7Il7cp3SHQAjyan3gHBBjDuPpW7WTsTH1MslHXbkC_YTePjvf9A4U2PqU65HvlrvhOEE3gwK5VUJQ8oGs-HLKHKRIlkEoBGfJwjzA7G13QMX_52obHw73vqdvxQve20mYG7CzLoyoJjSH2FO56DY6iYXPjcy21tHgMyX7DWZGhRdk0KmmXmTUOpEP4ijvm9bGS06F0S4T_b3ed-HgsWXtoSTQ_BgeVFMUufbHdspOHuPaNj5wvjfMszIVKeQ

alt text

如何分布式验证 v2 的 access_token​

  • 选择适合你的 jwt 标准库
  • 获取 tcb 系统的公钥，地址为: https://{{EnvID}}.ap-shanghai.tcb-api.tencentcloudapi.com/auth/v1/certs，替换 URL 中的 {{EnvID}} 为你真是的环境ID
  • 使用公钥验证 access_token
  • 只要签名是正确的，那么 access_token 就是正确的

v1 access_token 示例​

eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJkYXRhIjoie1wibG9naW5UeXBlXCI6XCJBTk9OWU1PVVNcIixcImVudk5hbWVcIjpcIm1pbmctMGdyZXhicGZkYWQxNzViYVwiLFwidXVpZFwiOlwiYTc1ZmFkODk0MmMwNDVkOGE0ZmZiMmYyYmNlZTkzYzJcIn0iLCJpYXQiOjE3MzAxODUwMDksImV4cCI6MTczMDE4ODYwOX0.Mc5fD7RaADrnh_j2Xe5sRNqFsuhaNOhf570tze4rnDI;1730185009

alt text