express+mysql+vue,从零搭建一个商城管理系统6-数据校验和登录

const query = require('../config/db'); const bcrypt = require('../config/bcrypt'); const md5 = require('md5'); const secretKey = 'longlongago'; const errFun = (msg,code)=>{ return { code:code||500, success:false, msg:msg||'操作失败' } } const sucFun = (data,msg)=>{ return { code:200, success:true, msg:msg||'操作成功', data, } } const userDao = { //注册 register:async(data)=>{ //验证账号密码格式 const validateResult =userDao.validateUserNameAndPassword(data); if(!validateResult.success)return errFun(validateResult.msg); //查询用户名是否已存在 const userResult = await userDao.queryUserByUserName(data); if(userResult.success)return errFun('用户名已存在'); //生成userId const userId = md5(data.userName+secretKey); //加密password const password = bcrypt.hash(data.password+secretKey); //根据userName查询user const sql = `insert into user (userId,userName,password) values('${userId}','${data.userName}','${password}')`; const result = await query(sql); if(result&&result.affectedRows==1)return sucFun({},'添加用户成功'); return errFun('添加用户失败'); }, //登录 login:async(data)=>{ //验证账号密码格式 const validateResult =userDao.validateUserNameAndPassword(data); if(!validateResult.success)return errFun(validateResult.msg); //查询用户是否存在 const userResult = await userDao.queryUserByUserName(data); if(!userResult.success)return errFun('用户名错误'); //验证密码是否正确 const comparePassword = bcrypt.compare(data.password+secretKey,userResult.data.password); //生成token if(comparePassword)return sucFun({},'登录成功'); return errFun('密码错误'); }, //通过用户名查询用户信息 queryUserByUserName:async(data)=>{ //根据userName查询user const sql = `select * from user where userName='${data.userName}'`; const result = await query(sql); if(result&&result.length>0)return sucFun(result[0],'查询用户成功'); return errFun('查询用户失败'); }, validateUserNameAndPassword:(data)=>{ //只包含大小写字母数字,包含1种即可 let nameReg = /[\da-zA-z]{6,16}$/; let nameValidate = nameReg.test(data.userName); if(!nameValidate)return errFun('用户名格式错误'); //大写字母，小写字母，特殊符号，包含2种以上 passwordReg = /^(?![\d]+$)(?![a-z]+$)(?![A-Z]+$)(?![~!@#$%^&*.]+$)[\da-zA-z~!@#$%^&*.]{6,16}$/; let passwordValidate = passwordReg.test(data.password); if(!passwordValidate)return errFun('密码格式错误'); return sucFun({},'用户名和密码格式正确'); }, } module.exports = userDao;