使用远程认证服务器的Authlib令牌验证器

from authlib.integrations.flask_client import OAuth
from flask import Flask, request, jsonify
import jwt

app = Flask(__name__)
oauth = OAuth(app)

# 配置JWT验证器
app.config['OAUTH_JWT_ENABLED'] = True
app.config['OAUTH_JWT_ISSUER'] = 'https://your-auth-server.com'
app.config['OAUTH_JWT_AUDIENCE'] = 'your-audience'
app.config['OAUTH_JWT_SECRET'] = 'your-secret'

@app.route('/protected')
def protected():
    token = request.headers.get('Authorization')
    if not token:
        return jsonify({'error': 'Missing token'}), 401
    
    try:
        claims = jwt.decode(token, app.config['OAUTH_JWT_SECRET'], algorithms=['HS256'])
        return jsonify({'message': 'Access granted', 'user': claims['user']})
    except jwt.ExpiredSignatureError:
        return jsonify({'error': 'Token expired'}), 401
    except jwt.InvalidTokenError:
        return jsonify({'error': 'Invalid token'}), 401

if __name__ == '__main__':
    app.run(debug=True)