$window.session用于登录和注销的存储(基于令牌);

$window.sessionStorage for login and logout ( token based);

本文关键字:于令牌 令牌 存储 session window 用于 登录 注销      更新时间:2023-09-26

我用Node.js和Angular.js创建了一个基于令牌的登录和注销函数。我正在保存到窗口存储中的令牌。

问题是,如果我注销,它只注销一个浏览器,如果我登录,它不会识别我是否已经登录。我想我必须扩展我的程序。

我的问题是,如何删除我登录的每个打开的浏览器的存储?或者我可以在我的代码中询问我是否登录了,我该怎么做?

提前感谢!

节点JS代码

app.post('/logout', function(req, res){
    jwt.verify(req.body.token, 'secretKey', function(err, decoded) {
        console.log("Decoded " + decoded);
        if(decoded._id != null){
        User.findOne({
        _id : decoded._id
    }, function(err, user) {
        if (err) {
            console.log('Error occured', err);
        } else {
            if (user) {
                res.end();
            }
    }
    });
    }else{
        Console.log("Could not logout");
    }
    });
});
app.post('/login', function(req, res) {
    User.findOne({
        email : req.body.email
    }, function(err, user) {
        if (err) {
            console.log('Error occured', err);
        } else {
            if (user) {
                // check if password matches
                if (req.body.password != undefined) {
                    var hashPWCheck = bcrypt.compareSync(req.body.password, user.password);
                    // true
                    //console.log(hashPWCheck);
                    if (!(hashPWCheck)) {
                        res.json({
                            success : false,
                            message : 'Authentication failed. Wrong password.'
                        });
                        console.log('Authentication failed. Wrong password.');
                    } else {
                        var token = jwt.sign(user, 'secretKey', {
                            expiresInMinutes : 60 // expires in 1 Minute
                        });
                        res.json({token : token, email : user.email});
                        console.log("Token created & sent to  Client(UserCtrlLogin): " + token);
                    }
                } else {
                    console.log("Password is required!");
                }
            } else {
                console.log("Incorect E-Mail");
            }
        }
    });
});

ANGULAR.js代码

app.controller('UserCtrlLogin', function($scope, $http, $window, $location, $rootScope) {
    $scope.logout = function(){
        var sessionlogout = $window.sessionStorage.getItem('token');

        var formData = {
            token : sessionlogout
        };  
    $http.post('/logout', formData).success(function(data, status, headers, config) {
        if(status == 200){

            $rootScope.isAlive = false;
            $rootScope.ali = false;
            $window.sessionStorage.removeItem('token');

        }else{
            $window.sessionStorage.removeItem('token');
            $rootScope.isAlive = false;
        }
        });      
    };

    $scope.signin = function() {
        var formData = {
            email : $scope.email,
            password : $scope.password
        };
        // $window.sessionStorage.removeItem('token');
        $http.post('/login', formData).success(function(data, status, headers, config) {
            console.log('Data: ' + data.email);
            //console.log('Status: ' + status);
            if (status == 200) {
                if(data.email == "goekguel.ali@gmail.com"){
                    $rootScope.ali = true;
                }
                $rootScope.isAlive = true;
                $window.sessionStorage.setItem('token', data.token);
                console.log("Token saved into Storage from Server(Node.js function /login)");

            }
        }).error(function(data, status, headers, config) {
            // called asynchronously if an error occurs
            // or server returns response with an error status.
            $window.sessionStorage.removeItem('token');
        });
    };
});

您需要在数据库中保存令牌,如果您在一个浏览器中登录或注销,则必须将令牌标记为有效/无效,而在另一个浏览器则需要检查后端的令牌状态。

附言:请参阅satellizer,这只是我对前端身份验证模块的建议。