创建后端认证

└── src
    ├── index.js
    ├── middlewares.js
    ├── routes-private.js
    ├── routes-public.js
    ├── config
    │   └── index.js
    ├── core
    │   └── database
    ├── middlewares
    │   ├── authenticate.js
    │   ├── errorHandler.js
    │   └── ...
    └── modules
        └── ...

└── modules
    ├── private
    │   └── home
    └── public
        ├── home
        ├── user
        └── login

└── user
    ├── index.js
    └── _routes
        ├── index.js
        └── fetch-user.js

// src/modules/public/user/index.js
import Router from 'koa-router'
import fetchUsers from './_routes'
import fetchUser from './_routes/fetch-user'
const router = new Router({
  prefix: '/users'
})
const routes = [fetchUsers, fetchUser]
for (var route of routes) {
  router.use(route.routes(), route.allowedMethods())
}
export default router

// src/modules/public/home/index.js
import Router from 'koa-router'
import index from './_routes'
const router = new Router() // 没有前缀
const routes = [index]
for (var route of routes) {
  router.use(route.routes(), route.allowedMethods())
}
export default router

// src/routes-public.js
import Router from 'koa-router'
import home from './modules/public/home'
import user from './modules/public/user'
import login from './modules/public/login'
const router = new Router({ prefix: '/public' })
const modules = [home, user, login]
for (var module of modules) {
  router.use(module.routes(), module.allowedMethods())
}
export default router

// src/routes-private.js
import Router from 'koa-router'
import home from './modules/private/home'
import authenticate from './middlewares/authenticate'
const router = new Router({ prefix: '/private' })
const modules = [home]
for (var module of modules) {
  router.use(authenticate, module.routes(),
    module.allowedMethods())
}
export default router

// backpack.config.js
module.exports = {
  webpack: (config, options, webpack) => {
    config.resolve.modules = ['./src', './src/core',
      './src/modules']
    return config
  }
}

import pool from '../../../../core/database/mysql'

$ npm i backpack-core
$ npm i cross-env
$ npm i koa
$ npm i koa-bodyparser
$ npm i koa-favicon
$ npm i koa-router
$ npm i koa-static

// package.json
{
  "scripts": {
    "dev": "backpack",
    "build": "backpack build",
    "start": "cross-env NODE_ENV=production node build/main.js"
  }
}

// src/config/index.js
export default {
  server: {
    port: 4000
  },
}

// src/middlewares/okOutput.js
export default async (ctx, next) => {
  await next()
  if (ctx.status === 200) {
    ctx.body = {
      status: 200,
      data: ctx.body
    }
  }
}

{"status":200,"data":{"message":"Hello World!"}}

// src/middlewares/errorHandler.js
export default async (ctx, next) => {
  try {
    await next()
  } catch (err) {
    ctx.status = err.status || 500
    ctx.type = 'json'
    ctx.body = {
      status: ctx.status,
      message: err.message
    }
    ctx.app.emit('error', err, ctx)
  }
}

{"status":400,"message":"username param is required."}

// src/middlewares/notFound.js
export default async (ctx, next) => {
  await next()
  if (ctx.status === 404) {
    ctx.throw(404, 'Not found')
  }
}

{"status":404,"message":"Not found"}

// src/middlewares.js
import serve from 'koa-static'
import favicon from 'koa-favicon'
import bodyParser from 'koa-bodyparser'
import errorHandler from './middlewares/errorHandler'
import notFound from './middlewares/notFound'
import okOutput from './middlewares/okOutput'
export default (app) => {
  app.use(errorHandler)
  app.use(notFound)
  app.use(okOutput)
  app.use(serve('assets'))
  app.use(favicon('static/favicon.ico'))
  app.use(bodyParser())
}

{"status":404,"message":"Not found"}

{"status":200,"data":{"message":"Hello World!"}}

localhost:4000/sample-asset.jpg
localhost:4000/favicon.ico

// src/modules/public/user/_routes/create-user.js
import bcrypt from 'bcryptjs'
const saltRounds = 10
const salt = bcrypt.genSaltSync(saltRounds)
const hashed = bcrypt.hashSync(request.password, salt)

// src/modules/public/login/_routes/local.js
import bcrypt from 'bcryptjs'
const isMatched = bcrypt.compareSync(request.password,
user.password)
if (isMatched === false) { ... }

// src/core/database/mysql.js
import util from 'util'
import mysql from 'mysql'
const pool = mysql.createPool({
  connectionLimit: 10,
  host : 'localhost',
  user : '<用户名>',
  password : '<密码>',
  database : '<数据库>'
})
pool.getConnection((err, connection) => {
  if (error) {
    // 处理错误 ...
  }
  // 如果没有错误，将连接释放回连接池。
  if (connection) {
    connection.release()
  }
  return
})
pool.query = util.promisify(pool.query)
export default pool

// backend/src/modules/public/user/_routes/index.js
import Router from 'koa-router';
import pool from 'core/database/mysql';

const router = new Router();

router.get('/', async (ctx, next) => {
  try {
    var users = await pool.query('SELECT `id`, `name`, `created_on` FROM `users`');
  } catch (err) {
    // Handle the error appropriately, e.g., log it and set an error response
    console.error('Error fetching users:', err);
    ctx.status = 500;
    ctx.body = { error: 'Failed to fetch users' };
    return;
  }
  ctx.type = 'json';
  ctx.body = users;
});

export default router;

// src/modules/public/login/_routes/local.js
import Router from 'koa-router'
import jwt from 'jsonwebtoken'
import bcrypt from 'bcryptjs'
import pool from 'core/database/mysql'
import config from 'config'
const router = new Router()
router.post('/login', async (ctx, next) => {
  let request = ctx.request.body || {}
  //...
})
export default router

$ curl -X POST -d "username=demo&password=123123" -H "Content-Type: application/x-www-form-urlencoded" http://localhost:4000/public/login/local

{"status":200,"data":{"user":{"name":"Alexandre","email":"demo@gmail.com"},"message":"logged in ok","token":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJuYW1lIjoiQWxleGFuZHJlIiwiZW1haWwiOiJkZW1vQGdtYWlsLmNvbSIsImlhdCI6MTY4MjgwMzYwNSwiZXhwIjoxNjgyODAzNjY1fQ.someRandomToken"}}

// src/middlewares/authenticate.js
import jwt from 'jsonwebtoken'
import config from 'config'
export default async (ctx, next) => {
  if (!ctx.headers.authorization) {
    ctx.throw(401, '受保护的资源，请使用 Authorization 标头获取访问权限')
  }
  const token = ctx.headers.authorization.split(' ')[1]
  try {
    ctx.state.jwtPayload = jwt.verify(token, config.JWT_SECRET)
  } catch (err) {
    // 处理错误。
    ctx.throw(401, '无效的令牌')
  }
  await next()
}