47 lines
1.1 KiB
JavaScript
47 lines
1.1 KiB
JavaScript
import jwt from 'jsonwebtoken'
|
|
import { db } from './db.js'
|
|
import crypto from 'crypto'
|
|
|
|
// 获取或生成 JWT 密钥
|
|
export async function getJwtSecret() {
|
|
let setting = await db.settings.findOne({ key: 'jwtSecret' })
|
|
|
|
if (!setting) {
|
|
// 首次启动，生成随机密钥
|
|
const secret = crypto.randomBytes(64).toString('hex')
|
|
await db.settings.insert({
|
|
key: 'jwtSecret',
|
|
value: secret,
|
|
createdAt: new Date()
|
|
})
|
|
return secret
|
|
}
|
|
|
|
return setting.value
|
|
}
|
|
|
|
// 生成 Token
|
|
export async function generateToken(payload) {
|
|
const secret = await getJwtSecret()
|
|
return jwt.sign(payload, secret, { expiresIn: '30d' })
|
|
}
|
|
|
|
// 验证 Token
|
|
export async function verifyToken(token) {
|
|
try {
|
|
const secret = await getJwtSecret()
|
|
return jwt.verify(token, secret)
|
|
} catch (error) {
|
|
return null
|
|
}
|
|
}
|
|
|
|
// 从请求头中提取 Token
|
|
export function extractToken(event) {
|
|
const authHeader = getHeader(event, 'authorization')
|
|
if (authHeader && authHeader.startsWith('Bearer ')) {
|
|
return authHeader.substring(7)
|
|
}
|
|
return null
|
|
}
|