nodejs的權限驗證

1.終端

 

2.token.js對內容進行加密和解析 

3.jwttest.router.js權限驗證

 

4.app.js 除登錄、注冊之外都需要權限驗證

 

 

 

5.test.html對查詢、添加、刪除、修改內容

@url=http://localhost:4000
@json=Content-Type: application/json 
# 添加 contentType：“application/json“之后，
#向后台發送數據的格式必須為json字符串
@auth = Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJuYW1lIjoiYWRtaW4iLCJpYXQiOjE2Mzg1MjEzOTYsImV4cCI6MTYzOTEyMTM5Nn0.4p4qx38_gwMiGTfoMyDK90eiWJkCu1bSUnDU7bALqqE

###登錄
POST {{url}}/login
{{json}}

{
    "name":"admin",
    "pwd":"123456"
}

###獲取數據
GET {{url}}/data
{{auth}}


###查詢
GET {{url}}/tag
{{auth}}


###添加
POST {{url}}/tag
{{auth}}
{{json}}
//參數解析

# 上面和下面必須得空一行
# content
# 表單方式 id=1000&name=張三
# 必須用雙引號
{
    "text":"張三"
}

###刪除
DELETE {{url}}/tag HTTP/1.1
{{auth}}
{{json}}

{
    "_id":"61a49227d932649e6db49917"
}

###查詢內容
GET {{url}}/content
{{auth}}

###添加內容
POST {{url}}/content
{{auth}}
{{json}}

{
    "title":"張三得肺癌看風景",
    "content":"大幅frvaegvfgtt方法打而奮斗",
}

###修改內容
PUT {{url}}/content?_id=61a5dcaca0577cd873843ae0
{{auth}}
{{json}}

{
    "top":true
}

###刪除
DELETE {{url}}/content HTTP/1.1
{{auth}}
{{json}}

{
    "_id":"61a5e2430e6e1bade4a81324"
}

###查詢
GET {{url}}/user
{{auth}}


###添加
POST {{url}}/user
{{auth}}
{{json}}

{
   "username":"寧可盈",
   "password":"nky12356",
   "email":"[e-mail]",
   "group":"限制會員"
}

###刪除
DELETE {{url}}/user HTTP/1.1
{{auth}}
{{json}}

{
    "_id":"61a8736573b0a80cfa93dea9"
}

###修改內容
PUT {{url}}/user?_id=61a883ee1cc6f29a4e9b7488
{{auth}}
{{json}}

{
    "group":"高級會員"
}