nodejs的权限验证

1.终端

2.token.js对内容进行加密和解析

3.jwttest.router.js权限验证

4.app.js 除登录、注册之外都需要权限验证

5.test.html对查询、添加、删除、修改内容

@url=http://localhost:4000
@json=Content-Type: application/json 
# 添加 contentType：“application/json“之后，
#向后台发送数据的格式必须为json字符串
@auth = Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJuYW1lIjoiYWRtaW4iLCJpYXQiOjE2Mzg1MjEzOTYsImV4cCI6MTYzOTEyMTM5Nn0.4p4qx38_gwMiGTfoMyDK90eiWJkCu1bSUnDU7bALqqE

###登录
POST {{url}}/login
{{json}}

{
    "name":"admin",
    "pwd":"123456"
}

###获取数据
GET {{url}}/data
{{auth}}


###查询
GET {{url}}/tag
{{auth}}


###添加
POST {{url}}/tag
{{auth}}
{{json}}
//参数解析

# 上面和下面必须得空一行
# content
# 表单方式 id=1000&name=张三
# 必须用双引号
{
    "text":"张三"
}

###删除
DELETE {{url}}/tag HTTP/1.1
{{auth}}
{{json}}

{
    "_id":"61a49227d932649e6db49917"
}

###查询内容
GET {{url}}/content
{{auth}}

###添加内容
POST {{url}}/content
{{auth}}
{{json}}

{
    "title":"张三得肺癌看风景",
    "content":"大幅frvaegvfgtt方法打而奋斗",
}

###修改内容
PUT {{url}}/content?_id=61a5dcaca0577cd873843ae0
{{auth}}
{{json}}

{
    "top":true
}

###删除
DELETE {{url}}/content HTTP/1.1
{{auth}}
{{json}}

{
    "_id":"61a5e2430e6e1bade4a81324"
}

###查询
GET {{url}}/user
{{auth}}


###添加
POST {{url}}/user
{{auth}}
{{json}}

{
   "username":"宁可盈",
   "password":"nky12356",
   "email":"1789217140@qq.com",
   "group":"限制会员"
}

###删除
DELETE {{url}}/user HTTP/1.1
{{auth}}
{{json}}

{
    "_id":"61a8736573b0a80cfa93dea9"
}

###修改内容
PUT {{url}}/user?_id=61a883ee1cc6f29a4e9b7488
{{auth}}
{{json}}

{
    "group":"高级会员"
}

nodejs的权限验证

推荐阅读