在前后端完全分离的情况下，Vue项目中实现token验证大致思路如下：
- 第一次登录的时候，前端调后端的登陆接口，发送用户名和密码 。
- 后端收到请求，验证用户名和密码，验证成功，就给前端返回一个token 。
- 前端拿到token，将token存储到localStorage和vuex中，并跳转路由页面 。
- 前端每次跳转路由，就判断 localStroage 中有无 token ，没有就跳转到登录页面，有则跳转到对应路由页面 。
- 每次调后端接口，都要在请求头中加token 。
- 后端判断请求头中有无token，有token，就拿到token并验证token，验证成功就返回数据，验证失败（例如：token过期）就返回401，请求头中没有token也返回401 。
- 如果前端拿到状态码为401，就清除token信息并跳转到登录页面 。
本文DEMO使用的时vue+vuex+element-ui
demo目录：
login.vue
<template>
<div id="login" align="center">
<el-row :gutter="20">
<el-col :span="7" :offset="8">
<div class="grid-content bg-purple">
<h1 align="center">VUE登录界面</h1><br>
</div>
</el-col>
<el-col :span="6" :offset="8">
<div class="grid-content bg-purple">
<el-form :model="ruleForm2" status-icon :rules="rules2" ref="ruleForm2" label-width="100px"
class="demo-ruleForm">
<el-form-item label="账号" prop="account">
<el-input type="text" v-model="ruleForm2.account" autocomplete="off"></el-input>
</el-form-item>
<el-form-item label="密码" prop="pass">
<el-input type="password" v-model="ruleForm2.pass" autocomplete="off"></el-input>
</el-form-item>
<el-form-item>
<el-button type="primary" @click="submitForm('ruleForm2')">提交</el-button>
<el-button @click="resetForm('ruleForm2')">重置</el-button>
<el-button type="success" @click="register">注册</el-button>
</el-form-item>
</el-form>
</div>
</el-col>
</el-row>
</div>
</template>
<script>
import { mapMutations } from 'vuex';
export default {
name: 'login',
data () {
var validatePass = (rule, value, callback) => {
if (value === '') {
callback(new Error('请输入密码'))
} else {
/*if (this.ruleForm2.pass !== '') {
this.$refs.ruleForm2.validateField('pass')
}*/
callback()
}
}
var validateAccount = (rule, value, callback) => {
if (value === '') {
callback(new Error('请输入账户名'))
} else {
/* if (this.ruleForm2.account !== '') {
this.$refs.ruleForm2.validateField('account')
}*/
callback()
}
}
return {
userToken:"",
ruleForm2: {
pass: '',
account: '',
},
rules2: {
pass: [
{validator: validatePass, trigger: 'blur'}
],
account: [
{validator: validateAccount, trigger: 'blur'}
]
}
}
},
methods: {
...mapMutations(['changeLogin']),
submitForm (formName) {
let _this=this;
this.$refs[formName].validate((valid) => {
if (valid) {
this.$axios({
method: 'post',
url: '/jwt/login',
data: {
'username': this.ruleForm2.account,
'password': this.ruleForm2.pass,
},
headers:{
"Authorization":" "
}
}).then(res => { //res是返回结果
_this.userToken='Bearer '+res.data.token;
console.log(this.userToken)//获取到的token
_this.changeLogin({ Authorization: this.userToken });
this.$router.push('/home');
alert('登陆成功');
}).catch(err => { //请求失败就会捕获报错信息
console.log('服务器连接失败');
console.log(err);
})
} else {
console.log('用户信息错误')
return false
}
})
},
resetForm (formName) {
this.$refs[formName].resetFields()
},
register () {
this.$router.push('/register')
}
},
}
</script>router/index.js代码（路由）
import Vue from 'vue'
import Router from 'vue-router'
import login from '@/components/login'
import logout from '@/components/logout'
import Face from '@/components/content/face';
import Speak from '@/components/content/speak';
import Video from '@/components/content/video';
import register from '@/components/register';
import Home from '@/components/home';
Vue.use(Router)
export default new Router({
routes: [
//登录
{
path: '/',
name: 'login',
component: login
},
//注册
{
path:'/register',
name: register,
component: register
},
//主界面
{
path: '/home',
name: 'home',
meta: {
requireAuth: true, // 添加该字段，表示进入这个路由是需要登录的
},
component: Home,
children:[
{
path:'/face',
name:'face',
component:Face
},
{
path:'/speak',
name:'speak',
component:Speak
},
{
path:'/video',
name:'video',
component:Video
}
]
},
//退出
{
path: '/logout',
name: 'logout',
component: logout
}
],
});store/index.js（将从后端请求过来的token存储到本地）
import Vue from 'vue';
import Vuex from 'vuex';
Vue.use(Vuex);
export default new Vuex.Store({
state: {
// 存储token
Authorization: localStorage.getItem('Authorization') ? localStorage.getItem('Authorization') : ''
},
/* actions: {
changeLogin(ctx,Authorization){
ctx.commit('changeLogin',Authorization);
}
},*/
mutations: {
// 修改token，并将token存入localStorage
changeLogin (state,user) {
state.Authorization = user.Authorization;
console.log("store/index.js---到这里了!");
localStorage.setItem('Authorization', user.Authorization);
}
}
});mian.js（判断异步请求是否需要加入token到header里）
import Vue from 'vue'
import App from './App'
import router from './router'
import ElementUI from 'element-ui'
import 'element-ui/lib/theme-chalk/index.css'
import locale from 'element-ui/lib/locale/lang/en'
import VideoPlayer from 'vue-video-player'
import axios from 'axios'
import store from './store'
require('video.js/dist/video-js.css')
require('vue-video-player/src/custom-theme.css')
Vue.config.productionTip = false
Vue.config.debug = true
Vue.use(ElementUI, {locale})
Vue.use(VideoPlayer)
Vue.prototype.$axios = axios
new Vue({
el: '#app',
router,
store,
components: {App},
render: h => h(App),
template: '<App/>'
})
//异步请求前在header里加入token
axios.interceptors.request.use(
config => {
if(config.url==='/jwt/login'||config.url==='/jwt'){
//如果是登录和注册操作，则不需要携带header里面的token
}else{
if (localStorage.getItem('Authorization')) {
config.headers.Authorizatior = localStorage.getItem('Authorization');
}
}
return config;
},
error => {
return Promise.reject(error);
});
//异步请求后，判断token是否过期
axios.interceptors.response.use(
response =>{
return response;
},
error => {
if(error.response){
switch (error.response.status) {
case 401:
localStorage.removeItem('Authorization');
this.$router.push('/');
}
}
}
)
//异步请求前判断请求的连接是否需要token
router.beforeEach((to, from, next) => {
if (to.path === '/') {
next();
} else {
let token = localStorage.getItem('Authorization');
console.log("我是浏览器本地缓存的token: "+token);
if (token === 'null' || token === '') {
next('/');
} else {
next();
}
}
});
微信扫一扫 
支付宝扫一扫 