pgjwt

JSON Web Token API 的PG实现 (supabase)

概览

扩展包名版本分类许可证语言
pgjwt0.2.0UTILMITSQL
ID扩展名BinLibLoadCreateTrustReloc模式
4160pgjwt-
相关扩展pgcrypto http pg_net pg_curl pgjq sparql pgcrypto gzip bzip

版本

类型仓库版本PG 大版本包名依赖
EXTPIGSTY0.2.01817161514pgjwtpgcrypto
RPMPIGSTY0.2.01817161514pgjwt_$v-
DEBPIGSTY0.2.01817161514postgresql-$v-pgjwt-
OS / PGPG18PG17PG16PG15PG14
el8.x86_64
el8.aarch64
el9.x86_64
el9.aarch64
el10.x86_64
el10.aarch64
d12.x86_64
d12.aarch64
d13.x86_64
d13.aarch64
PIGSTY 0.2.0
PIGSTY 0.2.0
PIGSTY 0.2.0
PIGSTY 0.2.0
PIGSTY 0.2.0
u22.x86_64
PIGSTY 0.2.0
PIGSTY 0.2.0
PIGSTY 0.2.0
PIGSTY 0.2.0
PIGSTY 0.2.0
u22.aarch64
PIGSTY 0.2.0
PIGSTY 0.2.0
PIGSTY 0.2.0
PIGSTY 0.2.0
PIGSTY 0.2.0
u24.x86_64
PIGSTY 0.2.0
PIGSTY 0.2.0
PIGSTY 0.2.0
PIGSTY 0.2.0
PIGSTY 0.2.0
u24.aarch64
PIGSTY 0.2.0
PIGSTY 0.2.0
PIGSTY 0.2.0
PIGSTY 0.2.0
PIGSTY 0.2.0

构建

您可以使用 pig build 命令构建 pgjwt 扩展的 RPM / DEB 包:

pig build pkg pgjwt         # 构建 RPM / DEB 包

安装

您可以直接安装 pgjwt 扩展包的预置二进制包,首先确保 PGDGPIGSTY 仓库已经添加并启用:

pig repo add pgsql -u          # 添加仓库并更新缓存

使用 pig 或者是 apt/yum/dnf 安装扩展:

pig install pgjwt;          # 当前活跃 PG 版本安装
pig ext install -y pgjwt -v 18  # PG 18
pig ext install -y pgjwt -v 17  # PG 17
pig ext install -y pgjwt -v 16  # PG 16
pig ext install -y pgjwt -v 15  # PG 15
pig ext install -y pgjwt -v 14  # PG 14
dnf install -y pgjwt_18       # PG 18
dnf install -y pgjwt_17       # PG 17
dnf install -y pgjwt_16       # PG 16
dnf install -y pgjwt_15       # PG 15
dnf install -y pgjwt_14       # PG 14
apt install -y postgresql-18-pgjwt   # PG 18
apt install -y postgresql-17-pgjwt   # PG 17
apt install -y postgresql-16-pgjwt   # PG 16
apt install -y postgresql-15-pgjwt   # PG 15
apt install -y postgresql-14-pgjwt   # PG 14

创建扩展

CREATE EXTENSION pgjwt CASCADE;  -- 依赖: pgcrypto

用法

pgjwt: PostgreSQL 的 JSON Web Token 支持

需要 pgcrypto 扩展。

签发令牌

SELECT sign(
    '{"sub":"1234567890","name":"John Doe","admin":true}',
    'secret'
);

返回一个 JWT 字符串,例如:eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOi...

验证令牌

SELECT * FROM verify(
    'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiYWRtaW4iOnRydWV9.TJVA95OrM7E2cBab30RMHrHDcEfxjoYZgeFONFh7HgQ',
    'secret'
);

返回结果:

headerpayloadvalid
{"alg":"HS256","typ":"JWT"}{"sub":"1234567890","name":"John Doe","admin":true}t

算法选择

sign()verify() 接受可选的第三个参数用于指定算法:'HS256'(默认)、'HS384''HS512'

SELECT sign('{"data":"value"}', 'secret', 'HS384');

最后修改 2026-03-14: update extension metadata (953cbd0)