如何通过Vue实现安全可控的服务器端通信的刨析

const https = require('https');
const fs = require('fs');
const express = require('express');
const app = express();

const options = {
  key: fs.readFileSync('server-key.pem'),
  cert: fs.readFileSync('server-crt.pem')
};

https.createServer(options, app).listen(443);

// 在服务器端生成Token
const jwt = require('jsonwebtoken');
const secretKey = 'mySecretKey';

app.get('/login', (req, res) => {
  const user = {
    id: 1,
    username: 'admin'
  };
  jwt.sign({ user }, secretKey, (err, token) => {
    res.json({ token });
  });
});

// 在Vue应用程序中发送Token并进行验证
import axios from 'axios';
import jwtDecode from 'jwt-decode';

const token = localStorage.getItem('token');
const decodedToken = jwtDecode(token);

const userId = decodedToken.user.id;

axios.get(`/api/users/${userId}`, {
  headers: {
    Authorization: `Bearer ${token}`
  }
});

// 在服务器端设置加密的数据传输
app.get('/api/users/:id', (req, res) => {
  const userId = req.params.id;
  const user = {
    id: 1,
    username: 'admin',
    email: 'admin@example.com'
  };

  // 这里可以使用加密算法对user进行加密

  res.json({ encryptedUser });
});

// 在Vue应用程序中接收并解密数据
axios.get(`/api/users/${userId}`, {
  headers: {
    Authorization: `Bearer ${token}`
  }
}).then((res) => {
  const encryptedUser = res.data.encryptedUser;

  // 这里可以使用解密算法对encryptedUser进行解密
});