首页 > 解决方案 > 使用中间件表达静态需要登录

问题描述

我创建了两个上传文件夹,分别是公共的和私有的。公共文件夹不需要身份验证,但私有文件夹需要中间件才能访问;

app.use('/uploads', express.static('uploads/public/'));
app.use('/uploads', require('./admin/routers/api/accessPrivate'), express.static('uploads/private/'));

这是我的accessPrivate

const userPermission = require("../../middleware/permission");
const auth = require('../../middleware/auth');

const accessMedia = async ( req, res, next) => {
  await auth(req, res, next); 
  next();
};

module.exports = accessMedia;

但它显示错误:“没有令牌”。这意味着没有req发送到服务器的标头;你能告诉我怎么做吗?

太感谢了;

标签: node.jsexpress

解决方案


uploads为所有请求定义一个通用中间件。检查用户的权限。

app.use('/uploads', async (req, res, next) => {

  let hasAccess = await auth(req, res, next);
  if (hasAccess) {
    app.use(express.static('uploads/private/'));
  }
  else {
    app.use(express.static('uploads/public/'));
  }
  next();
});

// your routes

app.use('*', function (req, res, next) {
  let target = 'index.html';

  if (req.baseUrl && req.baseUrl != '/') {
    target = req.baseUrl;
  }
  if(req.user) {
    root = 'uploads/private/';
  }
  else {
    root = 'uploads/public/';
  }
  res.sendFile(target, { root: root })
});


此外,您应该更改auth实现。


推荐阅读