[TOC] > [github](https://github.com/firebase/php-jwt) > [JWT JSON Web Token 驗證](../../../%E5%85%B6%E4%BB%96/JWTJSONWebToken%E9%AA%8C%E8%AF%81.md) ## 安裝 ``` composer require firebase/php-jwt ``` ## 使用 ``` use \Firebase\JWT\JWT; $key = "example_key"; $token = array( "iss" => "http://example.org", /* 簽發人 */ "aud" => "http://example.com", /* 受眾 */ "iat" => 1356999524, /* 簽發時間 */ "nbf" => 1357000000 /* 生效時間 */ ); // encode $jwt = JWT::encode($token, $key,'HS256'); //默認就是 'HS256' echo $jwt.PHP_EOL; //eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJodHRwOlwvXC9leGFtcGxlLm9yZyIsImF1ZCI6Imh0dHA6XC9cL2V4YW1wbGUuY29tIiwiaWF0IjoxMzU2OTk5NTI0LCJuYmYiOjEzNTcwMDAwMDB9.KcNaeDRMPwkRHDHsuIh1L2B01VApiu3aTOkWplFjoYI //decode $decoded = JWT::decode($jwt, $key, array('HS256')); $decoded_array = (array) $decoded; print_r($decoded_array); /** * Array ( [iss] => http://example.org [aud] => http://example.com [iat] => 1356999524 [nbf] => 1357000000 ) */ /** * 當簽名服務器和驗證服務器之間存在時鐘偏差時，您可以添加一個可以解釋的余地。建議這種回旋余地不應超過幾分鐘 */ JWT::$leeway = 60; // $leeway in seconds $decoded = JWT::decode($jwt, $key, array('HS256')); ```