授权捆绑网站域名系统

from flask import Flask, request, jsonify
import jwt

app = Flask(__name__)
app.config['SECRET_KEY'] = 'your_secret_key'

def generate_token(user_id):
    payload = {'user_id': user_id}
    token = jwt.encode(payload, app.config['SECRET_KEY'], algorithm='HS256')
    return token

def verify_token(token):
    try:
        payload = jwt.decode(token, app.config['SECRET_KEY'], algorithms=['HS256'])
        return payload['user_id']
    except jwt.ExpiredSignatureError:
        return 'Token expired. Please log in again.'
    except jwt.InvalidTokenError:
        return 'Invalid token. Please log in again.'

@app.route('/login', methods=['POST'])
def login():
    user_id = request.json.get('user_id')
    token = generate_token(user_id)
    return jsonify({'token': token})

@app.route('/protected', methods=['GET'])
def protected():
    token = request.headers.get('Authorization')
    if not token:
        return jsonify({'message': 'Token is missing'}), 401
    user_id = verify_token(token)
    if isinstance(user_id, str):
        return jsonify({'message': user_id}), 401
    return jsonify({'message': f'Hello, {user_id}!'})

if __name__ == '__main__':
    app.run(debug=True)