008 nodejs服务端jsonwebtoken实现token签名和验证

• 安装必要模块

npm i passport-jwt -s

• 建立passport验证token模块

//引入passport-jwt模块
const JwtStrategy = require('passport-jwt').Strategy,
       ExtractJwt = require('passport-jwt').ExtractJwt
const mysql = require('mysql')
const connection = require('./mysql')
var opts = {}
opts.jwtFromRequest = ExtractJwt.fromAuthHeaderAsBearerToken()  //通过配置信息来生成jwt的请求，验证这个token
opts.secretOrKey = "kuaidian"

module.exports = passport => {
    passport.use(new JwtStrategy(opts, function (jwt_payload, done) {
        const sql = "SELECT * FROM users WHERE username = '"+ jwt_payload.username+ "' or phonenum = '"+ jwt_payload.username + "'"
        connection.query(sql, (err, rows, fields) => {
            if (err