1. 安裝jwt插件
npm i express-jwt
2. 在app.js 使用中間件
const expressJwt = require('express-jwt');
//使用中間件驗(yàn)證token合法性
app.use(expressJwt({ secret: 'secret' }).unless({
path: ['/', '/api/user/token', '/api/admin/register', '/api/admin/login',/^\/wx\/.*/,/^\/images\/.*/], //除了這些地址，其他的URL都需要驗(yàn)證
}));
3. 在登錄路由 使用
const express = require('express');
const router = express.Router();
// 數(shù)據(jù)庫
let conn = require('../../db/conection');
let formatDate = require('../../utils/formatDate')
// JSON Web Token
const jwt = require("jsonwebtoken");
// 登錄
router.post("/login", async (req, res) => {
let { username, password } = req.body;
let selectSql = `SELECT a.*,r.RID,r.RNAME
FROM admin a
left join admin_role ar on a.id=ar.admin_id
LEFT JOIN role r on ar.role_id=r.RID
WHERE a.username = '${username}' AND a.password = '${password}' `;
let results = await conn(selectSql);
// 賬號(hào)密碼錯(cuò)誤
if (!results.data.length) {
res.json({
status: false,
msg: "賬號(hào)或者密碼錯(cuò)誤坟漱！",
});
return false;
}
let { id } = results.data[0];
// 更新登陸時(shí)間炕横，登陸次數(shù)
selectSql = `UPDATE admin SET login_count = login_count + 1 WHERE id = ${id};`;
let result2 = await conn(selectSql);
if (result2.data.affectedRows > 0) {
// 登錄成功
let payload = {
id,
username,
};
// 生成token
let token = jwt.sign(payload, "secret", { expiresIn: "4h" });
res.json({
status: true,
msg: "登錄成功！",
data: {
token,
data: results.data[0]
},
});
}
});
- 注意：
let token = jwt.sign(payload, "secret", { expiresIn: "4h" });
payload: 載荷毯炮，
secret：對(duì)應(yīng)app.js的app.use(expressJwt({ secret: 'secret' })
expiresIn：過期時(shí)長
