node.js+captchapng+jsonwebtoken實(shí)現(xiàn)登錄驗(yàn)證示例

import * as React from 'react'
import * as ReactDom from 'react-dom'
import {Link, browserHistory} from 'react-router';
import * as axios from 'axios';
export default class Login extends React.Component<any,any>{
 constructor(props){
 super(props)
 this.state = {
 userName : '',
 password : '',
 yzNoId : '',
 hash : Math.random()
 }
 }
 handleUserName(e) : any {
 this.setState({
 userName : e.target.value
 })
 }
 handlePassword(e) : any {
 this.setState({
 password : e.target.value
 })
 }
 handleYzId(e) : any {
 this.setState({
 yzNoId : e.target.value
 })
 }
 render(){
 const { userName, password, yzNoId } = this.state;
 return(
 <div>
 <div className="nav-wrap">
 <ul className="nav">
 <li><Link to="/home">首頁(yè)</Link></li>
 <li><Link to="/imgLoad">上傳</Link></li>
 <li><Link to="/login">登陸</Link></li>
 </ul>
 </div>
 <div className="content">
 <div className="login-warp">
 <p>
 <input type="text" className="username" value={userName} onChange={this.handleUserName.bind(this)} placeholder="用戶名"/>
 </p>
 <p>
 <input type="text" className="password" value={password} onChange={this.handlePassword.bind(this)} placeholder="密碼"/> 
 </p> 
 <p>
 <input type="text" className="yz" value={yzNoId} onChange={this.handleYzId.bind(this)} placeholder="驗(yàn)證碼"/>
 <img src={"http://localhost:3000/captcha"} className="yz-img" /> 
 </p>
 <p>
 <input type="button" className="submit" value="登陸" onClick={this.sbumit.bind(this,{userName:userName,password:password,captcha:yzNoId})} /> 
 </p> 
 </div>
 </div>
 </div>
 )
 }
}

var Login = require('./controller/login');
var login = new Login;
router.get('/captcha', login.captcha);
router.post('/login',login.loginer);
login是定義在控制器的一個(gè)類的實(shí)例，captcha，loginer是它的方法。分別是返回驗(yàn)證圖片、登錄驗(yàn)證。
controller/login.js

var rf = require('fs');
var captchapng = require('captchapng');
class Login {
 constructor(){}
 captcha(req, res, next) {
 var str = parseInt(Math.random()*9000+1000); //隨機(jī)生成數(shù)字
 req.session.captcha = str; // 存入session
 var p = new captchapng(80, 30, str); //生成圖片
 p.color(0, 0, 0, 0);
 p.color(80, 80, 80, 255);
 var img = p.getBase64();
 var imgbase64 = new Buffer(img, 'base64');
 res.writeHead(200, {
 'Content-Type': 'image/png'
 });
 res.end(imgbase64);
 }
 loginer(req, res, next) {
 let captcha = req.body.captcha;
 let userName = req.body.userName;
 let password = req.body.password;
 if (captcha != req.session.captcha) {
 res.status(400).send({
 message: '驗(yàn)證碼錯(cuò)誤'
 });
 }else if(userName == "chenxuehui" && password == "123321"){
 res.json({"code":100,"verson":true,"msg":"登陸成功","token":token});
 }else{
 res.json({"code":0,"verson":false,"msg":"密碼錯(cuò)誤"});
 }
 }
}
module.exports = Login

router.get('/captcha', login.captcha);

setHash() {
 this.setState({
 hash : Math.random()
 })
}

import * as React from 'react'
import * as ReactDom from 'react-dom'
import {Link, browserHistory} from 'react-router';
import * as axios from 'axios';
export default class Login extends React.Component<any,any>{
 constructor(props){
 super(props)
 this.state = {
 userName : '',
 password : '',
 yzNoId : '',
 hash : Math.random()
 }
 }
 public async sbumit(params : any) : Promise<any>{
 let res = await axios.post('http://localhost:3000/login',params);
 }
 handleUserName(e) : any {
 this.setState({
 userName : e.target.value
 })
 }
 handlePassword(e) : any {
 this.setState({
 password : e.target.value
 })
 }
 handleYzId(e) : any {
 this.setState({
 yzNoId : e.target.value
 })
 }
 setHash() {
 this.setState({
 hash : Math.random()
 })
 }
 render(){
 const { userName, password, yzNoId } = this.state;
 return(
 <div>
 <div className="nav-wrap">
 <ul className="nav">
 <li><Link to="/home">首頁(yè)</Link></li>
 <li><Link to="/imgLoad">上傳</Link></li>
 <li><Link to="/login">登陸</Link></li>
 </ul>
 </div>
 <div className="content">
 <div className="login-warp">
 <p>
 <input type="text" className="username" value={userName} onChange={this.handleUserName.bind(this)} placeholder="用戶名"/>
 </p>
 <p>
 <input type="text" className="password" value={password} onChange={this.handlePassword.bind(this)} placeholder="密碼"/> 
 </p> 
 <p>
 <input type="text" className="yz" value={yzNoId} onChange={this.handleYzId.bind(this)} placeholder="驗(yàn)證碼"/>
 <img src={"http://localhost:3000/captcha?aaa="+this.state.hash} className="yz-img" onClick={this.setHash.bind(this)} /> 
 </p>
 <p>
 <input type="button" className="submit" value="登陸" onClick={this.sbumit.bind(this,{userName:userName,password:password,captcha:yzNoId})} /> 
 </p> 
 </div>
 </div>
 </div>
 )
 }
}

var rf = require('fs');
var jwt = require('jsonwebtoken');
var captchapng = require('captchapng');
var Tokens = require('../middleware/token')
var t = new Tokens;
class Login {
 constructor(){}
 captcha(req, res, next) {
 var str = parseInt(Math.random()*9000+1000); //隨機(jī)生成數(shù)字
 req.session.captcha = str; // 存入session
 var p = new captchapng(80, 30, str); //生成圖片
 p.color(0, 0, 0, 0);
 p.color(80, 80, 80, 255);
 var img = p.getBase64();
 var imgbase64 = new Buffer(img, 'base64');
 res.writeHead(200, {
 'Content-Type': 'image/png'
 });
 res.end(imgbase64);
 }
 loginer(req, res, next) {
 let captcha = req.body.captcha;
 let userName = req.body.userName;
 let password = req.body.password;
 if (captcha != req.session.captcha) {
 res.status(400).send({
 message: '驗(yàn)證碼錯(cuò)誤'
 });
 }else if(userName == "chenxuehui" && password == "123321"){
 // 設(shè)置token
 var datas = {userName:"chenxuehui"}
 //調(diào)用../middleware/token 下方法設(shè)置
 var token = t.setToken('cxh',300,datas)
 res.json({"code":100,"verson":true,"msg":"登陸成功","token":token});
 }else{
 res.json({"code":0,"verson":false,"msg":"密碼錯(cuò)誤"});
 }
 }
}

module.exports = Login

var jwt = require('jsonwebtoken');
class Tokens {
 constructor(){}
 testToken(req,res,next) {
 var token = req.body.token || req.query.token || req.headers['x-access-token'];
 
 if(token) {
 //存在token，解析token
 jwt.verify(token, 'cxh' , function(err,decoded) {
 if(err) {
 // 解析失敗直接返回失敗警告
 return res.json({success:false,msg:'token錯(cuò)誤'})
 }else {
 //解析成功加入請(qǐng)求信息，繼續(xù)調(diào)用后面方法
 req.userInfo = decoded;
 next()
 }
 })
 }else {
 return res.status(403).send({success:false,msg:"沒有token"})
 }
 }
 setToken(name,time,data) {
 var jwtSecret = name;
 var token = jwt.sign(data, jwtSecret, {
 expiresIn: time
 })
 return token;
 }
}
module.exports = Tokens

var express = require('express');
var router = express.Router();
var rf = require('fs');
var Login = require('./controller/login');
var Tokens = require('./middleware/token')
var t = new Tokens;
var login = new Login;
//主頁(yè)
router.get('/', function(req, res, next) {
 res.render("wap/index")
});
//獲取圖片驗(yàn)證碼
router.get('/captcha', login.captcha);
//登錄驗(yàn)證
router.post('/login',login.loginer);
//請(qǐng)求數(shù)據(jù)時(shí) t.testToken 驗(yàn)證token
router.post('/list',t.testToken,function(req, res, next){
 res.json({
 //在請(qǐng)求信息里面拿到數(shù)據(jù)
 username : req.userInfo.userName,
 success : true,
 result : [
 {
 name:'1111111'
 },
 {
 name :'22222'
 }
 ]
 })
})
module.exports = router;

import * as axios from 'axios';
import { transToken } from '../decorator/index'


class Home extends React.Component<any,any>{
 constructor(props){
 super(props)
 this.state = {
 data : ''
 }
 }
 async getList(): Promise<any>{
 let token = sessionStorage.getItem('token');
 const config = {
 // 請(qǐng)求頭信息
 headers: {'x-access-token': token} 
 }
 let res = await axios.post('http://localhost:3000/list',{},config);
 if(!res.data.success){
 browserHistory.push('/login');
 return;
 }
 this.setState({
 data : res.data
 })
 }
 render(){
 const { data } = this.state;
 return(
 <div>
 <div className="nav-wrap">
 <ul className="nav">
 <li><Link to="/home">首頁(yè)</Link></li>
 <li><Link to="/imgLoad">上傳</Link></li>
 <li><Link to="/login">登陸</Link></li>
 </ul>
 </div>
 <div className="content">
 Home
 <span onClick={this.getList.bind(this)}>獲取數(shù)據(jù)</span>
 <div>{
 data ? data.result.map( (val,k) => {
 return <li key = {k}>{val.name}</li>
 }) : null
 }</div>
 </div>
 </div>
 
 )
 }
}
export default Home

var express = require('express');
var path = require('path');
var favicon = require('serve-favicon');
var logger = require('morgan');
var cookieParser = require('cookie-parser');
var bodyParser = require('body-parser');
var session = require("express-session");
var ejs = require('ejs');

var index = require('./routes/index');


var app = express();

// view engine setup
app.set('views', path.join(__dirname, 'views'));
// app.set('view engine', 'jade');
app.engine('html', ejs.__express);
app.set('view engine', 'html');
app.use(session({
 secret:"dabao",
 resave:false,
 saveUninitialized:true,
 cookie:{}
}));
// uncomment after placing your favicon in /public
//app.use(favicon(path.join(__dirname, 'public', 'favicon.ico')));
app.use(logger('dev'));
app.use(bodyParser.json());
app.use(bodyParser({limit: 5000000}));
app.use(bodyParser.urlencoded({ extended: false }));
app.use(cookieParser());
app.use(express.static(path.join(__dirname, '')));

app.use('/', index);


// catch 404 and forward to error handler
app.use(function(req, res, next) {
 var err = new Error('Not Found');
 err.status = 404;
 next(err);
});

// error handler
app.use(function(err, req, res, next) {
 // set locals, only providing error in development
 res.locals.message = err.message;
 res.locals.error = req.app.get('env') === 'development' ? err : {};

 // render the error page
 res.status(err.status || 500);
 res.render('error');
});

module.exports = app;

var express = require('express');
var router = express.Router();
var rf = require('fs');
var Login = require('./controller/login');
var Tokens = require('./middleware/token')
var t = new Tokens;
var login = new Login;
/* GET home page. */
router.get('/', function(req, res, next) {
 res.render("wap/index")
});
router.post('/upLoadImg',function(req,res,next){
 let imgData = req.body.imgData;
 console.log(imgData)
 let base64Data = imgData.replace(/^data:image\/\w+;base64,/, "");
 let dataBuffer = new Buffer(base64Data, 'base64');
 let timer = Number( new Date() );
 console.log(timer)
 rf.writeFile("views/images/artCover"+timer+".png",dataBuffer, function(err) {
 if(err) {
 res.json({"code":400,"verson":false,"msg":err});
 }else {
 res.json({"code":100,"verson":true,"url":"views/src/common/images/artCover/"+timer+".png"});
 }
 });
})
router.get('/captcha', login.captcha);
router.post('/login',login.loginer);
router.post('/list',t.testToken,function(req, res, next){
 // 先解析token 
 console.log(req.userInfo)
 res.json({
 username : req.userInfo.userName,
 success : true,
 result : [
 {
 name:'1111111'
 },
 {
 name :'22222'
 }
 ]
 })
})
module.exports = router;

var rf = require('fs');
var jwt = require('jsonwebtoken');
var captchapng = require('captchapng');
var Tokens = require('../middleware/token')
var t = new Tokens;
class Login {
 constructor(){}
 captcha(req, res, next) {
 var str = parseInt(Math.random()*9000+1000); //隨機(jī)生成數(shù)字
 req.session.captcha = str; // 存入session
 var p = new captchapng(80, 30, str); //生成圖片
 p.color(0, 0, 0, 0);
 p.color(80, 80, 80, 255);
 var img = p.getBase64();
 var imgbase64 = new Buffer(img, 'base64');
 res.writeHead(200, {
 'Content-Type': 'image/png'
 });
 res.end(imgbase64);
 }
 loginer(req, res, next) {
 let captcha = req.body.captcha;
 let userName = req.body.userName;
 let password = req.body.password;
 if (captcha != req.session.captcha) {
 res.status(400).send({
 message: '驗(yàn)證碼錯(cuò)誤'
 });
 }else if(userName == "chenxuehui" && password == "123321"){
 // 設(shè)置token
 var datas = {userName:"chenxuehui"}
 var token = t.setToken('cxh',300,datas)
 res.json({"code":100,"verson":true,"msg":"登陸成功","token":token});
 }else{
 res.json({"code":0,"verson":false,"msg":"密碼錯(cuò)誤"});
 }
 }
}
module.exports = Login

var jwt = require('jsonwebtoken');

class Tokens {
 constructor(){}
 testToken(req,res,next) {
 var token = req.body.token || req.query.token || req.headers['x-access-token'];

 if(token) {
 jwt.verify(token, 'cxh' , function(err,decoded) {
 if(err) {
 return res.json({success:false,msg:'token錯(cuò)誤'})
 }else {
 req.userInfo = decoded;
 next()
 }
 })
 }else {
 return res.status(403).send({success:false,msg:"沒有token"})
 }
 }
 setToken(name,time,data) {
 var jwtSecret = name;
 var token = jwt.sign(data, jwtSecret, {
 expiresIn: time
 })
 return token;
 }
}
module.exports = Tokens

import * as React from 'react'
import * as ReactDom from 'react-dom'
import {Link, browserHistory} from 'react-router';
import * as axios from 'axios';
class Home extends React.Component<any,any>{
 constructor(props){
 super(props)
 this.state = {
 data : ''
 }
 }
 async getList(): Promise<any>{
 let token = sessionStorage.getItem('token');
 const config = {
 // 請(qǐng)求頭信息
 headers: {'x-access-token': token} 
 }
 let res = await axios.post('http://localhost:3000/list',{},config);
 if(!res.data.success){
 browserHistory.push('/login');
 return;
 }
 this.setState({
 data : res.data
 })
 }
 render(){
 const { data } = this.state;
 return(
 <div>
 <div className="nav-wrap">
 <ul className="nav">
 <li><Link to="/home">首頁(yè)</Link></li>
 <li><Link to="/imgLoad">上傳</Link></li>
 <li><Link to="/login">登陸</Link></li>
 </ul>
 </div>
 <div className="content">
 Home
 <span onClick={this.getList.bind(this)}>獲取數(shù)據(jù)</span>
 <div>{
 data ? data.result.map( (val,k) => {
 return <li key = {k}>{val.name}</li>
 }) : null
 }</div>
 </div>
 </div>
 
 )
 }
}
export default Home