使用的插件:jsonwebtoken
    登录添加jwt令牌

    1. const adminService = require('../../services/adminService');
    2. const express = require('express');
    3. // 路由
    4. const router = express.Router();
    5. //高阶函数 解决无法使用promise
    6. const { asyncHandler } = require('../getSendResult');
    7. // jwt 认证
    8. const jwt = require('../jwt')
    11. router.post('/login', asyncHandler( async(req,res,next) => {
    12.   const result = await adminService.login(req.body.loginId, req.body.loginPwd);
    13.   if (result) {
    14.     // jwt
    15.     jwt.publish(res, 3600, {
    16.       id: result.id,
    17.     })
    18.   }
    19.   return result;
    20. }))
    23. module.exports = router;

    验证jwt令牌

    1. const jwt = require('./jwt')
    2. /**
    3.  * 那些接口需要有cookie才能访问
    4.  */
    6. const needTokenApi = [
    7.   { method: 'POST', path: '/api/student' },
    8.   { method: 'PUT', path: '/api/student/:id' },
    9.   { method: 'GET', path: '/api/student' },
    10.   { method: 'GET', path: '/api/admin/whoami' },
    11. ];
    13. const { getErr } = require('./getSendResult');
    14. // 将路径转化为正则进行匹配
    15. const { pathToRegexp, match, parse, compile } = require('path-to-regexp');
    16. // const cryptoToken = require('../util/cryptoToken');
    18. module.exports = (req, res, next) => {
    19.   const apis = needTokenApi.filter((ele) => {
    20.     const reg = pathToRegexp(ele.path);
    21.     return ele.method == req.method && reg.test(req.path);
    22.   });
    23.   if (apis.length === 0) {
    24.     next();
    25.     return;
    26.   }
    27.   /**
    28.    * 是否有token 通过cookie进行验证
    29.    */
    30.   // let token = req.cookies.token;
    31.   // if (!token) {
    32.   //   token = req.headers.authorization;
    33.   // }
    34.   // if (!token) {
    35.   //   console.log('没有token');
    36.   //   handleNonToken(req, res, next);
    37.   //   return;
    38.   // }
    40.   // 通过session进行验证
    41.   // if(req.session.loginUser) {
    42.   //   next();
    43.   //   return;
    44.   // } else {
    45.   //   handleNonToken(req, res, next)
    46.   // }
    48.   // 通过jwt验证
    49.   const result = jwt.verify(req)
    50.   if (!result) {
    51.     handleNonToken(req, res, next);
    52.     return;
    53.   }
    54.   req.userId = result.id;
    55.   next();
    56. };
    57. /**
    58.  * 没有token
    59.  * @param {*} req
    60.  * @param {*} res
    61.  * @param {*} next
    62.  */
    63. function handleNonToken(req, res, next) {
    64.   res
    65.     .status(403)
    66.     .send(getErr('you dont have any token to access the api', 403));
    67. }