egg.js jwt 几步实现加解密

npm install --save egg-cors egg-jwt

// config/config.default.js
config.jwt ={
    secret: '123456', 
    enable: true, //default is false
    match: '/jwt', //optional
    expiresIn: '24h',
  };

  //安全配置 （https://eggjs.org/zh-cn/core/security.html）
  config.security ={
    csrf: {
      enable: false,
      ignoreJSON: true,
    },
    domainWhiteList: [ 'http://localhost:8080' ], //允许访问接口的白名单
};

  //跨域配置
  config.cors ={
    origin: '*',
    allowMethods: 'GET,HEAD,PUT,POST,DELETE,PATCH',
  };

'use strict';
module.exports = app =>{
  const { router, controller: { login }, middleware } =app;
  const jwt =middleware.jwtCheck(app.config.jwt);

  router.post(`login`, login.index); // 登录得到 token 等用户信息
  router.get(`login/test`, jwt, login.test); // 解码验证
};

//controller/login.js
'use strict';

const Controller = require('../core/baseController');
classHomeController extends Controller {

  //登录，验证，成功发token
  asyncindex() {
    const { ctx, app } = this;
    const req =ctx.request.body;
    const errArr =app.validator.validate({
      username: 'string',
      password: 'string',
    }, req);

    if (errArr) { //非空验证
      this.$error(JSON.stringify(errArr));
      return;
    }

    try{
      //查库验证
      const data = await ctx.model.User.findAll({ where: req });

      if (data.length > 0) {

        const user = data[0];
        const { jwt: { secret, expiresIn } } =app.config;
        //需传 secret 过期时间
        const token =app.jwt.sign({
          id: user.id,
        }, secret, {
          expiresIn,
        });

        this.$success({ token, user });

      } else{
        this.$error('用户名或密码不正确');
      }
    } catch(err) {
      this.$error(err);
    }

  }

  asynctest() {
    const { ctx } = this;
    ctx.body = { code: 201, msg: '验证成功', data: ctx.state.user };
    console.log('
 user +++', ctx.state.user);
  }

}

module.exports = HomeController;

// middleware/jwtCheck.js
'use strict';
module.exports = options =>{
  return asyncfunction jwtErr(ctx, next) {
    const headerStr =ctx.request.header.authorization;

    if(headerStr) {
      try{
        //解码token，需传加密时的 secret
        const decode =ctx.app.jwt.verify(headerStr, options.secret);
        ctx.state.user = decode; //信息存一下，这步很重要，业务里要用
        awaitnext();
      } catch(error) {

        ctx.status = 401;
        //翻译错误码
        let message =error.message;ctx.body ={
          code: -1,
          msg: message,
        };
        return;
      }
    } else{
      ctx.status = 401;
      ctx.body ={
        code: -1,
        msg: 'no header token',
      };
      return;
    }
  };
};