优化登录验证、退出逻辑

back/api/auth.ts

@@ -46,6 +46,14 @@ export default (app: Router) => {
                 config.secret as any,
                 { expiresIn: 60 * 60 * 24 * 7, algorithm: 'HS384' },
               );
+              fs.writeFileSync(
+                config.authConfigFile,
+                JSON.stringify({
+                  username: authInfo.username,
+                  password: authInfo.password,
+                  token,
+                }),
+              );
               res.send({ code: 200, token });
             } else {
               res.send({ code: 400, msg: config.authError });
@@ -61,6 +69,30 @@ export default (app: Router) => {
     },
   );
 
+  route.post(
+    '/logout',
+    async (req: Request, res: Response, next: NextFunction) => {
+      const logger: Logger = Container.get('logger');
+      try {
+        fs.readFile(config.authConfigFile, 'utf8', function (err, data) {
+          if (err) console.log(err);
+          const authInfo = JSON.parse(data);
+          fs.writeFileSync(
+            config.authConfigFile,
+            JSON.stringify({
+              username: authInfo.username,
+              password: authInfo.password,
+            }),
+          );
+          res.send({ code: 200 });
+        });
+      } catch (e) {
+        logger.error('🔥 error: %o', e);
+        return next(e);
+      }
+    },
+  );
+
   route.post(
     '/user',
     async (req: Request, res: Response, next: NextFunction) => {
@@ -76,4 +108,21 @@ export default (app: Router) => {
       }
     },
   );
+
+  route.get(
+    '/user',
+    async (req: Request, res: Response, next: NextFunction) => {
+      const logger: Logger = Container.get('logger');
+      try {
+        fs.readFile(config.authConfigFile, 'utf8', (err, data) => {
+          if (err) console.log(err);
+          const authInfo = JSON.parse(data);
+          res.send({ code: 200, data: { username: authInfo.username } });
+        });
+      } catch (e) {
+        logger.error('🔥 error: %o', e);
+        return next(e);
+      }
+    },
+  );
 };

back/loaders/express.ts

@@ -4,6 +4,7 @@ import cors from 'cors';
 import routes from '../api';
 import config from '../config';
 import jwt from 'express-jwt';
+import fs from 'fs';
 
 export default ({ app }: { app: Application }) => {
   app.enable('trust proxy');
@@ -16,6 +17,22 @@ export default ({ app }: { app: Application }) => {
       path: ['/api/login'],
     }),
   );
+  app.use((req, res, next) => {
+    if (req.url && req.url.includes('/api/login')) {
+      return next();
+    }
+    const data = fs.readFileSync(config.authConfigFile, 'utf8');
+    const authHeader = req.headers.authorization;
+    if (data) {
+      const { token } = JSON.parse(data);
+      if (token && authHeader.includes(token)) {
+        return next();
+      }
+    }
+    const err: any = new Error('UnauthorizedError');
+    err['status'] = 401;
+    next(err);
+  });
   app.use(config.api.prefix, routes());
 
   app.use((req, res, next) => {