统一身份认证系统在学生管理中的应用与实现

from flask import Flask, request, jsonify

import jwt

import datetime

app = Flask(__name__)

SECRET_KEY = 'your-secret-key'

@app.route('/login', methods=['POST'])

def login():

username = request.json.get('username')

password = request.json.get('password')

# 这里应验证用户名和密码

if username == 'student' and password == '123456':

payload = {

'username': username,

'exp': datetime.datetime.utcnow() + datetime.timedelta(hours=1)

}

token = jwt.encode(payload, SECRET_KEY, algorithm='HS256')

return jsonify({'token': token})

else:

return jsonify({'error': 'Invalid credentials'}), 401

@app.route('/protected', methods=['GET'])

def protected():

token = request.headers.get('Authorization')

if not token:

return jsonify({'error': 'Missing token'}), 401

try:

payload = jwt.decode(token, SECRET_KEY, algorithms=['HS256'])

return jsonify({'message': f'Welcome {payload["username"]}!'})

except jwt.ExpiredSignatureError:

return jsonify({'error': 'Token expired'}), 401

except jwt.InvalidTokenError:

return jsonify({'error': 'Invalid token'}), 401

if __name__ == '__main__':

app.run(debug=True)