2.0

index.js

@@ -12,78 +12,82 @@ function hmac(str, secret) {
   return base64encode(buf, true)
 }
 
-export const jwtPackage = {
-  name: 'jwt',
-  install() {
-    return {
-      // 签名, 返回token
-      sign(data, secret, ttl) {
-        // header: base64("{"typ":"JWT","alg":"HS256"}")
-        // 这里固定使用sha256,
-        var header = 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9'
+export function createJwtModule() {
+  return {
+    name: 'jwt',
+    install() {
+      return {
+        // 签名, 返回token
+        sign(data, secret, ttl) {
+          // header: base64("{"typ":"JWT","alg":"HS256"}")
+          // 这里固定使用sha256,
+          var header = 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9'
 
-        // 加入过期时间,
-        var payload = { data, expires: Date.now() + ttl * 1000 }
-        var auth_str = ''
+          // 加入过期时间,
+          var payload = { data, expires: Date.now() + ttl * 1000 }
+          var auth_str = ''
 
-        payload = JSON.stringify(payload)
-        payload = base64encode(payload, true)
-        auth_str = hmac(`${header}.${payload}`, secret)
+          payload = JSON.stringify(payload)
+          payload = base64encode(payload, true)
+          auth_str = hmac(`${header}.${payload}`, secret)
 
-        return [header, payload, auth_str].join('.')
-      },
+          return [header, payload, auth_str].join('.')
+        },
 
-      // 校验token
-      verify(token = '', secret) {
-        var jwt = token.split('.')
-        var auth_str, payload
+        // 校验token
+        verify(token = '', secret) {
+          var jwt = token.split('.')
+          var auth_str, payload
+
+          if (jwt.length !== 3) {
+            return false
+          }
+          auth_str = jwt.pop()
+          payload = JSON.parse(base64decode(jwt[1], true))
+
+          // 如果已经过期, 则不再校验hash
+          if (payload.expires < Date.now()) {
+            return false
+          }
+
+          if (hmac(jwt.join('.'), secret) === auth_str) {
+            return payload.data
+          }
 
-        if (jwt.length !== 3) {
           return false
         }
-        auth_str = jwt.pop()
-        payload = JSON.parse(base64decode(jwt[1], true))
-
-        // 如果已经过期, 则不再校验hash
-        if (payload.expires < Date.now()) {
-          return false
-        }
-
-        if (hmac(jwt.join('.'), secret) === auth_str) {
-          return payload.data
-        }
-
-        return false
       }
     }
   }
 }
 
-export function jwtConnect(req, res, next) {
-  var { secret, level } = this.get('jwt')
-  var deviceID = ''
-  var ssid
+export function createJwt() {
+  return function (req, res, next) {
+    var { secret, level } = this.get('jwt')
+    var deviceID = ''
+    var ssid
 
-  // options请求不处理jwt
-  if (req.method === 'OPTIONS') {
-    return next()
+    // options请求不处理jwt
+    if (req.method === 'OPTIONS') {
+      return next()
+    }
+
+    // 校验UA
+    if (level & 2) {
+      deviceID += req.header('user-agent')
+    }
+
+    // 校验IP
+    if (level & 4) {
+      deviceID += req.ip()
+    }
+
+    if (deviceID) {
+      deviceID = sha1(deviceID)
+    }
+
+    req.__mix_key__ = secret + deviceID
+
+    next()
   }
-
-  // 校验UA
-  if (level & 2) {
-    deviceID += req.header('user-agent')
-  }
-
-  // 校验IP
-  if (level & 4) {
-    deviceID += req.ip()
-  }
-
-  if (deviceID) {
-    deviceID = sha1(deviceID)
-  }
-
-  req.mixKey = secret + deviceID
-
-  next()
 }