在nodejs+express中，采用nodejs后端路由控制用户登录后，为了加强前端的安全性控制，阻止用户通过在浏览器地址栏中输入地址访问后台接口，在app.js中需要加入拦截器进行拦截：
/*************************导入需要的包************************************************/
|
1
2
3
4
5
6
7
|
var express = require('express');var path = require('path');var favicon = require('serve-favicon');var logger = require('morgan');var cookieParser = require('cookie-parser');//1、引入cookie模块，拦截器中req.cookies.userCookies是依赖于该模块的；var bodyParser = require('body-parser');var ejs=require("ejs"); |
/**************************设置nodejs路由对应的文件***************************/
|
1
2
3
4
5
6
7
8
9
|
var index = require('./routes/index');var ccap=require('./routes/ccap');var jiami=require("./routes/jiami");var changePwd=require('./routes/changePwd');var login=require("./routes/login");var business=require("./routes/pay/business");var logs=require("./routes/pay/logs");var channel=require("./routes/pay/channel");var config=require("./routes/pay/config"); |
/******************express配置模板视图**********************************/
|
1
2
3
4
5
6
|
var app = express();// view engine setupapp.set('views', path.join(__dirname, 'views'));//app.set('view engine', 'ejs');//设置视图为ejs引擎app.engine('html',ejs.__express); //设置视图为html引擎，ejs在页面仍然可用app.set('view engine', 'html');//设置视图为html引擎，ejs在页面仍然可用 |
/******************引入要使用的模块**********************************************/
|
1
2
3
4
5
6
7
|
// uncomment after placing your favicon in /public//app.use(favicon(path.join(__dirname, 'public', 'favicon.ico')));app.use(logger('dev'));app.use(bodyParser.json());app.use(bodyParser.urlencoded({ extended: false }));app.use(cookieParser());//2、引入cookie,h后可开始使用cookie模块获取客户端的cookies;app.use(express.static(path.join(__dirname, 'public'))); |
/*************************登录拦截器**************************************/
|
1
2
3
4
5
6
7
8
9
10
11
|
app.use(function (req, res, next) { var url = req.originalUrl;//获取浏览器中当前访问的nodejs路由地址； var userCookies=req.cookies.userCookies; //获取客户端存取的cookie,userCookies为cookie的名称；//有时拿不到cookie值，可能是因为拦截器位置放错，获取该cookie的方式是依赖于nodejs自带的cookie模块，//因此，获取cookie必须在1,2步之后才能使用，否则拿到的cookie就是undefined. console.log("123"+url); console.log("app获得cookie"+req.cookies.userCookies+"真假11111："+(req.cookies.userCookies==undefined)); if(url=='/login'&&!(userCookies==undefined)){ //通过判断控制用户登录后不能访问登录页面； return res.redirect('/');//页面重定向； } next();}); |
/*********************************node路由配置**********************************/
|
1
2
3
4
5
6
7
8
9
|
app.use('/', index);app.use('/ccap',ccap);app.use("/app/jiami",jiami);app.use("/login",login);app.use("/changePwd",changePwd);app.use("/business",business);app.use("/logs",logs);app.use("/channel",channel);app.use("/config",config); |
/*******************************捕获异常***********************************/
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
|
// catch 404 and forward to error handlerapp.use(function(req, res, next) { var err = new Error('Not Found'); err.status = 404; next(err);});// error handlers// development error handler// will print stacktraceif (app.get('env') === 'development') { app.use(function(err, req, res, next) { res.status(err.status || 500); res.render('error', { message: err.message, error: err }); });}// production error handler// no stacktraces leaked to userapp.use(function(err, req, res, next) { res.status(err.status || 500); res.render('error', { message: err.message, error: {} });});module.exports = app; |