node中token的生成与解析配置

npm i jsonwebtoken

const jwt = require("jsonwebtoken");

const jwt = require("jsonwebtoken");
// 获取secret秘钥
const config = require("../config.js");
const expiresIn = '1h' // token有效期

// 对用户信息进行加密 生成token
const generateToken = (user) => {
  const token = jwt.sign(
    {
      user_id: user.id,
      role: user.role,
    },
    config.SECRET_KEY,
    { expiresIn:expiresIn }
  );
  return 'Bearer ' + token;
};

// 登录
exports.login = (req, res) => {
  const userinfo = req.body;
  if (!userinfo.username || !userinfo.password) {
    return res.send({
      message: "用户名或者密码不能为空！",
      status: 0,
    });
  }
  const sqlStr = `select * from user where username=?`;
  db.query(sqlStr, [userinfo.username], (err, results) => {
    if (err) {
      res.handleResult(err.message);
    } else if (results.length > 0) {
      const password = results[0].password;
      const isExit = bcrypt.compareSync(userinfo.password, password);
      if (isExit) {
        // 对用户信息处理的时候，推荐将用户密码与头像信息去掉
        const user = { ...results[0], password: "", avatar: "" };
        // 生成token
        const token = generateToken(user);
        res.handleResult("登录成功！", 0,token);
      } else {
        res.handleResult("密码不正确！");
      }
    } else {
      res.handleResult("用户不存在！");
    }
  });
};

npm i express-jwt@5.3.3

const expressJWT = require("express-jwt");

const expressJWT = require('express-jwt')
const config = require('./config')

// 配置token解析
// unless中的path 除了这个地址，其他的URL都需要验证token
app.use(expressJWT({secret: config.SECRET_KEY}).unless({path: ['/api/login']  }));

expressJwt({ secret: config.SECRET_KEY, algorithms: ['RS256'] });

npm i express-jwt@5.3.3