nestjs学习笔记,登录验证

nestjs学习笔记

1、使用 @nestjs/jwt做登录验证

• //安装 @nestjs/jwt
  yarn add @nestjs/jwt
  创建local.strategy.ts文件

import { PassportStrategy } from '@nestjs/passport';
import { IStrategyOptions, Strategy } from 'passport-local';
import { user } from '../entity/user.entity';
import { InjectRepository } from '@nestjs/typeorm';
import { UserService } from '../user.service'
import { BadRequestException, Injectable } from '@nestjs/common';


@Injectable()
export class LocalStorage extends PassportStrategy(Strategy) {
  constructor(
    private readonly userService: UserService,
  ) {
    super({
      usernameField: 'username',
      passwordField: 'password',
    } as IStrategyOptions);
  }

  async validate(username: string, password: string): Promise<any> {
    
    const user = await this.userService.login(username, password)
    return user;
  }
}

• 创建 jwt.contants.ts文件
  做验证

export const jwtContants = {
  secret: 'json_web_token_secret_key',
};

• 创建 jwt.strategy.ts文件

import { Injectable, UnauthorizedException } from '@nestjs/common';
import { PassportStrategy } from '@nestjs/passport';
import { jwtContants } from './jwt.contants';
import { ExtractJwt, Strategy } from 'passport-jwt';
import { user } from './entity/user.entity';
// import 

// import { ConfigService } from '@nestjs/config';
// import { StrategyOptions, Strategy, ExtractJwt } from 'passport-jwt';

@Injectable()
export class JwtStrategy extends PassportStrategy(Strategy) {
  constructor() {
    super({
      // 获取请求header token值
      jwtFromRequest: ExtractJwt.fromHeader('token'),
      secretOrKey: jwtContants.secret,
    });
  }  
  async validate(payload: any) {
    console.log('payload', payload);
    //payload：jwt-passport认证jwt通过后解码的结果
    return { username: payload.username, id: payload.sub };
  }
}

• 在登录接口位置使用 @UseGuards 装饰器

@UseGuards(AuthGuard('local')) //守卫将从body中提取username、password，然后调用LocalStrategy中的validate方法，若认证通过，则将User信息赋值给request.user。

---

• 现在接口就能返回用户信息的token了

---