Node.js实现用户身份验证和授权的示例代码

npm install passport passport-local

const passport = require('passport');
const LocalStrategy = require('passport-local').Strategy;

passport.use(new LocalStrategy(
  function(username, password, done) {
    // 在此处验证用户提供的用户名和密码
    if (username === 'admin' && password === 'password') {
      return done(null, { username: 'admin' });
    } else {
      return done(null, false, { message: 'Incorrect username or password' });
    }
  }
));

app.post('/login', 
  passport.authenticate('local', { failureRedirect: '/login' }),
  function(req, res) {
    res.redirect('/');
  });

app.post('/login', 
  passport.authenticate('local', { failureRedirect: '/login' }),
  function(req, res) {
    res.send('登录成功！');
  });

app.get('/logout', function(req, res) {
  req.logout();
  res.send('注销成功！');
});

const jwt = require('jsonwebtoken');
const expressJwt = require('express-jwt');

const secret = 'mysecretkey';

// 生成JWT
app.get('/generateToken', function(req, res) {
  const token = jwt.sign({ username: 'admin' }, secret);
  res.json({ token });
});

// 验证JWT
app.get('/protected',
  expressJwt({ secret: secret }),
  function(req, res) {
    res.send('授权成功！');
  });

app.get('/protected',
  expressJwt({ secret: secret }),
  function(req, res) {
    if (req.user.username === 'admin') {
      res.send('只有管理员可以访问！');
    } else {
      res.sendStatus(403);
    }
  });