使用flask安全性在登录时将JWT添加到cookie

from flask import Flask, request, make_response
import jwt

app = Flask(__name__)
app.config['SECRET_KEY'] = 'your_secret_key'

@app.route('/login', methods=['POST'])
def login():
    # 获取用户名和密码
    username = request.form.get('username')
    password = request.form.get('password')

    # 验证用户名和密码，生成JWT
    if username == 'admin' and password == 'password':
        payload = {'username': username}
        token = jwt.encode(payload, app.config['SECRET_KEY'], algorithm='HS256')

        # 将JWT添加到cookie中
        response = make_response('Login successful')
        response.set_cookie('jwt', token)
        return response

    return 'Login failed'

import functools

def login_required(func):
    @functools.wraps(func)
    def wrapper(*args, **kwargs):
        # 获取cookie中的JWT
        token = request.cookies.get('jwt')

        if token:
            try:
                # 验证JWT
                payload = jwt.decode(token, app.config['SECRET_KEY'], algorithms=['HS256'])
                # 在处理函数中可以获取payload中的用户信息进行权限控制或其他操作
                return func(*args, **kwargs)
            except jwt.ExpiredSignatureError:
                return 'Token expired'
            except jwt.InvalidTokenError:
                return 'Invalid token'

        return 'Unauthorized'

    return wrapper

@app.route('/protected')
@login_required
def protected():
    return 'Protected content'