使用JWT验证套接字io连接

令牌是否在另一台服务器上创建都没有关系。如果您拥有正确的密钥和算法，您仍然可以验证它。

用

jsonwebtoken

模块实施

客户

const {token} = sessionStorage;const socket = io.connect('http://localhost:3000', {  query: {token}});

服务器

const io = require('socket.io')();const jwt = require('jsonwebtoken');io.use(function(socket, next){  if (socket.handshake.query && socket.handshake.query.token){    jwt.verify(socket.handshake.query.token, 'SECRET_KEY', function(err, depred) {      if (err) return next(new Error('Authentication error'));      socket.depred = depred;      next();    });  }  else {    next(new Error('Authentication error'));  }    }).on('connection', function(socket) {    // Connection now authenticated to receive further events    socket.on('message', function(message) {        io.emit('message', message);    });});

用

socketio-jwt

模块实施

此模块使客户端和服务器端的身份验证更加容易。只是看看他们的例子。

客户

const {token} = sessionStorage;const socket = io.connect('http://localhost:3000');socket.on('connect', function (socket) {  socket    .on('authenticated', function () {      //do other things    })    .emit('authenticate', {token}); //send the jwt});

服务器

const io = require('socket.io')();const socketioJwt = require('socketio-jwt');io.sockets  .on('connection', socketioJwt.authorize({    secret: 'SECRET_KEY',    timeout: 15000 // 15 seconds to send the authentication message  })).on('authenticated', function(socket) {    //this socket is authenticated, we are good to handle more events from it.    console.log(`Hello! ${socket.depred_token.name}`);  });