统一身份认证在航天系统中的框架实现与应用

import jwt

from flask import Flask, request, jsonify

from datetime import datetime, timedelta

app = Flask(__name__)

# 密钥用于签名JWT

SECRET_KEY = 'your-secret-key'

# 模拟用户数据库

users = {

'user1': {'password': 'pass123', 'role': 'admin'},

'user2': {'password': 'pass456', 'role': 'operator'}

}

def generate_token(username):

payload = {

'username': username,

'exp': datetime.utcnow() + timedelta(hours=1)

}

token = jwt.encode(payload, SECRET_KEY, algorithm='HS256')

return token

@app.route('/login', methods=['POST'])

def login():

data = request.get_json()

username = data.get('username')

password = data.get('password')

if not username or not password:

return jsonify({'error': 'Missing username or password'}), 400

user = users.get(username)

if not user or user['password'] != password:

return jsonify({'error': 'Invalid credentials'}), 401

token = generate_token(username)

return jsonify({'token': token, 'role': user['role']}), 200

if __name__ == '__main__':

app.run(debug=True)

from functools import wraps

from flask import request, jsonify

def token_required(f):

@wraps(f)

def decorated(*args, **kwargs):

token = request.headers.get('Authorization')

if not token:

return jsonify({'message': 'Token is missing!'}), 401

try:

data = jwt.decode(token, SECRET_KEY, algorithms=['HS256'])

current_user = data['username']

except:

return jsonify({'message': 'Token is invalid!'}), 401

return f(current_user, *args, **kwargs)

return decorated

@app.route('/protected', methods=['GET'])

@token_required

def protected(current_user):

return jsonify({'message': f'Hello, {current_user}! You have access to this protected route.'}), 200