go中输入字节0处的非法base64数据

I am starting with go and jwt.

For testing purpose I have a hardcoded secret. And a route to get the key

const secretKey = "YOLOSWAG"

var mySigningKey = []byte(secretKey)


var GetTokenHandler = http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
    token := jwt.New(jwt.SigningMethodHS256)
    token.Claims = jwt.MapClaims{
        "admin": true,
        "name":  "John Doe",
        "exp":   time.Now().Add(time.Hour * 24).Unix(),
    }

    tokenString, _ := token.SignedString(mySigningKey)

    w.Write([]byte(tokenString))
})

var jwtMiddleware = jwtmiddleware.New(jwtmiddleware.Options{
    ValidationKeyGetter: func(token *jwt.Token) (interface{}, error) {
        return mySigningKey, nil
    },
    SigningMethod: jwt.SigningMethodHS256,
})

and later added the jwtMiddleware to my route

r.Handle("/protected", jwtMiddleware.Handler(ProtectedTestHandler)).Methods("GET")

So localhost:3000/protected will output an error Required authorization token not found

this works.

/token will output my token. This works too.

And finally /protected with (in postman) Authorization: Bearer {token}

Will output illegal base64 data at input byte 0 I am really confused why this happens.

Don't use curlies around your token. The documentation in many places is confusing because it wraps your token in curlies. It's meant to represent a placeholder. You're not actually supposed to wrap your token with them. Do NOT do it like this.

Bearer {my-special-token}

It should be done like this

Bearer my-special-token