itsdangerous 实现数据签名

itsdangerous的使用

• itsdangerous模块的参考资料链接 http://itsdangerous.readthedocs.io/en/latest/

• 安装：pip install itsdangerous

• TimedJSONWebSignatureSerializer的使用

  • 使用TimedJSONWebSignatureSerializer可以生成带有有效期的token

from itsdangerous import TimedJSONWebSignatureSerializer as Serializer
from django.conf import settings

# serializer = Serializer(秘钥, 有效期秒)
serializer = Serializer(settings.SECRET_KEY, 300)
# serializer.dumps(数据), 返回签名后的bytes类型数据
token = serializer.dumps({'mobile': '18512345678'})
token = token.decode()

# 检验token
# 验证失败，会抛出itsdangerous.BadData异常
serializer = Serializer(settings.SECRET_KEY, 300)
try:
    # 获取到签名前数据
    data = serializer.loads(token)        
except BadData:
    return None