重构jwt

index.js

@@ -5,28 +5,25 @@
  */
 
 import crypto from 'crypto.js'
-import { base64encode, base64decode } from 'crypto.js'
+import { base64encode, base64decode, sha1 } from 'crypto.js'
 
 function hmac(str, secret) {
   var buf = crypto.hmac('sha256', str, secret, 'buffer')
   return base64encode(buf, true)
 }
 
-export default {
+export const jwtPackage = {
   name: 'jwt',
   install() {
-    var expires = this.get('session').ttl
-    var opened = this.get('jwt')
-
     return {
       // 签名, 返回token
-      sign(data, secret = 'it_is_secret_key') {
-        if (opened) {
+      sign(data, secret, ttl) {
         // header: base64("{"typ":"JWT","alg":"HS256"}")
         // 这里固定使用sha256,
         var header = 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9'
-          // 加入过期时间, 同session.ttl
-          var payload = { data, expires: Date.now() + expires * 1000 }
+
+        // 加入过期时间,
+        var payload = { data, expires: Date.now() + ttl * 1000 }
         var auth_str = ''
 
         payload = JSON.stringify(payload)
@@ -34,12 +31,10 @@ export default {
         auth_str = hmac(`${header}.${payload}`, secret)
 
         return [header, payload, auth_str].join('.')
-        }
       },
 
       // 校验token
-      verify(token = '', secret = 'it_is_secret_key') {
-        if (opened) {
+      verify(token = '', secret) {
         var jwt = token.split('.')
         var auth_str, payload
 
@@ -63,4 +58,32 @@ export default {
     }
   }
 }
+
+export function jwtConnect(req, res, next) {
+  var { secret, level, ttl } = this.get('jwt')
+  var deviceID = ''
+  var ssid
+
+  // options请求不处理jwt
+  if (req.method === 'OPTIONS') {
+    return next()
+  }
+
+  // 校验UA
+  if (level & 2) {
+    deviceID += req.header('user-agent')
+  }
+
+  // 校验IP
+  if (level & 4) {
+    deviceID += req.ip()
+  }
+
+  if (deviceID) {
+    deviceID = sha1(deviceID)
+  }
+
+  req.mixKey = secret + deviceID
+
+  next()
 }