柚子快报邀请码778899分享：koa里使用jwt
1.安装jsonwebtoken
npm install jsonwebtoken
2.获取token，sign.js
先不加身份验证了，只是简单生成一个token
const jwt = require('jsonwebtoken');
async function getToken(ctx) {
ctx.response.type = 'json';
ctx.status = 200;
const secret = 'ABCDEFG';
const token = jwt.sign({
data: 'XYZ',
}, secret, {
expiresIn: 60 // 过期时间
});
ctx.cookies.set(
'token',
token, {
domain: 'localhost', // 设置 cookie 的域
path: '/', // 设置 cookie 的路径
maxAge: 60 * 1000, // cookie 的有效时间 ms
httpOnly: true, // 是否要设置 httpOnly
overwrite: true // 是否要覆盖已有的 cookie 设置
}
)
ctx.body = {
success: true,
token: `Bearer ${token}`,
};
}
module.exports = {
'getToken': getToken,
}
3.验证token, verify.js
const jwt = require('jsonwebtoken');
const verifyToken = async (ctx, next) => {
let flag = false;
const secret = 'ABCDEFG';
try {
let url = ctx.request.url.split('?')[0]
// 检测接口是否在不校验接口列表中
let url_config = [
'/api/getToken'
]
let checkUrl = url_config.some((item) => {
return item == url
})
if (checkUrl) {
await next()
} else {
let token = ctx.request.headers["authorization"]
token = token.replace('Bearer ', '')
if (token) {
let playload = await jwt.verify(token, secret)
const {
data
} = playload;
if (data === 'XYZ') {
await next()
}
} else {
ctx.body = {
code: 1000,
msg: '登录信息已过期'
}
}
}
} catch (error) {
if (error.name == 'TokenExpiredError') {
ctx.body = {
code: 401,
msg: 'token已过期'
}
} else if (error.name == 'JsonWebTokenError') {
ctx.body = {
code: 401,
msg: '无效的token'
}
} else {
ctx.body = {
"error": {
"type": "FAILED",
"message": "未知",
}
}
}
}
}
module.exports = {
'verifyToken': verifyToken,
}
4.路由 router.js
const Router = require('koa-router')
const router = new Router({
prefix: '/api', // 统一前缀，接口全部为 /api/xxx 格式
})
const {
verifyToken
} = require('./verify')
router.use(verifyToken)
const sign = require('./sign');
Object.keys(sign).forEach(key => {
router.all("/" + key, sign[key]);
})
const test = require('./test');
Object.keys(test).forEach(key => {
router.all("/" + key, test[key]);
})
module.exports = router;
5.测试test.js
async function getNews(ctx) {
ctx.response.type = 'json';
ctx.status = 200;
ctx.body = JSON.stringify({
success: true,
content: [{
id: "1",
title: "news1",
content: "new11111111"
},
{
id: "2",
title: "news2",
content: "new222222"
},
{
id: "3",
title: "news3",
content: "new333333"
},
],
});
}
module.exports = {
'getNews': getNews,
}
6.入口app.js
const koa = require('koa')
const app = new koa()
const router = require('./router');
app.use(router.routes()).use(router.allowedMethods())
// 启动服务
let port = process.env.PORT || 3005
app.listen(port, () => {
console.log(`server runing at ${port}...`)
})
运行node app.js
使用postman请求
先获取token
再在headers里添加 Authorization，把上一个请求获取的token加上，就可以获取数据了
柚子快报邀请码778899分享：koa里使用jwt
发表评论