login.js 2.4 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778
  1. 'use strict';
  2. const assert = require('assert');
  3. const _ = require('lodash');
  4. const { CrudService } = require('naf-framework-mongoose/lib/service');
  5. const { BusinessError, ErrorCode } = require('naf-core').Error;
  6. const jwt = require('jsonwebtoken');
  7. const uuid = require('uuid');
  8. class LoginService extends CrudService {
  9. constructor(ctx) {
  10. super(ctx, 'login');
  11. this.model = this.ctx.model.User;
  12. this.rmodel = this.ctx.model.Role;
  13. }
  14. // 用户登录
  15. async login(data) {
  16. const { mobile, passwd } = data;
  17. // 根据用户输入的手机号查询其他用户表中是否存在相应数据
  18. const user = await this.model.findOne({ mobile });
  19. // 如果用户不存在抛出异常
  20. if (!user) {
  21. throw new BusinessError(ErrorCode.USER_NOT_EXIST);
  22. }
  23. const _user = await this.model.findOne({ mobile }, '+passwd');
  24. // 将用户输入的密码进行加密并与查询到的用户数据密码相比对
  25. const pas = await this.createJwtPwd(passwd);
  26. // 如果两个密码不一致抛出异常
  27. if (pas !== _user.passwd.secret) {
  28. throw new BusinessError(ErrorCode.BAD_PASSWORD);
  29. }
  30. // 取出用户的类型,根据用户类型返回相应信息
  31. const state = uuid();
  32. const key = `free:auth:state:${state}`;
  33. const token = await this.createJwt(user);
  34. console.log('key--' + key);
  35. console.log('token--' + token);
  36. await this.app.redis.set(key, token, 'EX', 60 * 60 * 24);
  37. return { key };
  38. }
  39. // 创建登录Token
  40. async createJwtPwd(password) {
  41. const { secret, expiresIn, issuer } = this.config.jwt;
  42. const token = await jwt.sign(password, secret);
  43. return token;
  44. }
  45. // 创建登录Token
  46. async createJwt({ id, name, mobile, roles, remark, openid }) {
  47. const { secret, expiresIn = '1d', issuer = type } = this.config.jwt;
  48. const subject = mobile;
  49. const res = { uid: id, name, mobile, roles, openid, remark };
  50. const token = await jwt.sign(res, secret, { expiresIn, issuer, subject });
  51. return token;
  52. }
  53. // 取得redis内token信息
  54. async token({ key }) {
  55. assert(key, 'key不能为空');
  56. const token = await this.app.redis.get(key);
  57. if (!token) {
  58. throw new BusinessError(ErrorCode.SERVICE_FAULT, 'token已经过期');
  59. }
  60. return { token };
  61. }
  62. // 删除操作
  63. async destroy({ key }) {
  64. const res = await this.app.redis.del(key);
  65. console.log(res);
  66. return res;
  67. }
  68. }
  69. module.exports = LoginService;