x-server-mobile/backend/app/util/JwtUtil.php

<?php

namespace app\util;

use Firebase\JWT\JWT;
use Firebase\JWT\Key;
use Exception;

class JwtUtil
{
    private static string $secret = 'your-secret-key-change-in-production';
    private static int $expire = 86400 * 7; // 7 days

    /**
     * 生成 Token
     */
    public static function encode(array $data): string
    {
        $payload = array_merge($data, [
            'iat' => time(),
            'exp' => time() + self::$expire,
        ]);

        return JWT::encode($payload, self::$secret, 'HS256');
    }

    /**
     * 解析 Token
     */
    public static function decode(string $token): ?array
    {
        try {
            $decoded = JWT::decode($token, new Key(self::$secret, 'HS256'));
            return (array) $decoded;
        } catch (Exception $e) {
            return null;
        }
    }

    /**
     * 验证 Token
     */
    public static function verify(string $token): bool
    {
        return self::decode($token) !== null;
    }
}