如何确保在React / Redux路由器重定向之前进行JWT验证?

时间:2019-04-17 17:20:17

标签: reactjs redux jwt redux-saga feathersjs

我正在使用React / Redux,Knex + Objection.Js + PostgreSQL用于数据库,以及feathersjs用于API框架来开发全栈PERN应用程序。因此,我也在前端使用了@feathersjs/client及其身份验证程序包。我还将connected-react-router用于路由。不幸的是,每当我尝试导航到受保护的路由时,在重定向将用户带到登录页面之前,负责设置用户状态的“登录”请求(通过其与服务器进行身份验证的jwt)不会完成。 / p>

我正在通过分派操作来验证react应用程序的index.js文件中的jwt。

if (localStorage['feathers-jwt']) {
  try {
       store.dispatch(authActions.login({strategy: 'jwt', accessToken: localStorage.getItem('feathers-jwt')}));
  }
  catch (err){
      console.log('authenticate catch', err);
  }
}

该操作由redux-saga接听,该操作执行以下操作

export function* authSubmit(action) {
  console.log('received authSubmit');
  try {
    const data = yield call(loginApi, action);
    yield put({type: authTypes.LOGIN_SUCCESS, data});

  } catch (error) {
      console.log(error);
      yield put({type: authTypes.LOGIN_FAILURE, error})
  }
}

function loginApi(authParams) {
  return services.default.authenticate(authParams.payload)
}

这是我的isAuthenticated函数,带有配置对象:

const isAuthenticated =  connectedReduxRedirect({
  redirectPath: '/login',
  authenticatedSelector: state => state.auth.user !== null,
  redirectAction: routerActions.replace,
  wrapperDisplayName: 'UserIsAuthenticated'
});

这是将HOC应用于容器组件

const Login = LoginContainer;
const Counter = isAuthenticated(CounterContainer);
const LoginSuccess = isAuthenticated(LoginSuccessContainer);

最后,这是渲染

export default function (store, history) {
  ReactDOM.render(
    <Provider store={store}>
      <ConnectedRouter history={history}>
        <Switch>
          <Route exact={true} path="/" component={App}/>
          <Route path="/login" component={Login}/>
          <Route path="/counter" component={Counter}/>
          <Route path="/login-success" component={LoginSuccess}/>
          <Route component={NotFound} />
        </Switch>
      </ConnectedRouter>
    </Provider>,
    document.getElementById('root')
  );
}

在登录并访问时,例如/counter以下是我期望发生的事情

  1. LOGIN_REQUEST操作已触发

  2. 已触发LOGIN_SUCCESS操作,用户已通过JWT验证

  3. 路由器看到user.auth对象不为null,因此用户为 已验证

  4. 路由器允许导航而无需重定向

我看到的是以下内容(手动导航到/counter时)

  1. @@ INIT

  2. auth / LOGIN_REQUEST [这很好,loggingIn: true]

  3. @@ router / LOCATION_CHANGE

{
  type: '@@router/LOCATION_CHANGE',
  payload: {
    location: {
      pathname: '/counter',
      search: '',
      hash: ''
    },
    action: 'POP',
    isFirstRendering: true
  }
}
  1. @@ router_LOCATION_CHANGE [这是问题]
  type: '@@router/LOCATION_CHANGE',
  payload: {
    location: {
      pathname: '/login',
      hash: '',
      search: '?redirect=%2Fcounter',
      key: 'kdnf4l'
    },
    action: 'REPLACE',
    isFirstRendering: false
  }
}
  1. 用户导航到/login,该用户将退出当前设计的用户。

  2. LOGOUT_REQUEST-> LOGIN_SUCCESS-> LOCATION_CHANGE(至/login-success

再次,我们将不胜感激,并且我可以根据需要提供其他任何东西。

谢谢!

-布伦登

1 个答案:

答案 0 :(得分:0)

解决方案

我今天能够通过查看身份验证程序包feathers-reduxify-authentication的功能来解决此问题。在大多数情况下,重定向已正确配置。

后退

authentication.js

请注意多种策略,以及如何返回context.result。这是feathers-reduxify-authentication正常工作所必需的。

module.exports = function (app) {
  const config = app.get('authentication');

  // Set up authentication with the secret
  app.configure(authentication(config));
  app.configure(jwt());
  app.configure(local(config.local));


  app.service('authentication').hooks({
    before: {
      create: [
        authentication.hooks.authenticate(config.strategies),
      ],
      remove: [
        authentication.hooks.authenticate('jwt')
      ]
    },
    after: {
      create: [
        context => {
          context.result.data = context.params.user;
          context.result.token = context.data.accessToken;
          delete context.result.data.password;
          return context;
        }
      ]
    }
  });
};

src / feathers / index.js

这是根据eddystop的示例项目,但已升级到Feathers 3.0 +

import feathers from '@feathersjs/client';
import  io  from 'socket.io-client';
import reduxifyAuthentication from 'feathers-reduxify-authentication';
import reduxifyServices, { getServicesStatus } from 'feathers-redux';
import { mapServicePathsToNames, prioritizedListServices } from './feathersServices';
const hooks = require('@feathersjs/client');

const socket = io('http://localhost:3030');
const app = feathers()
  .configure(feathers.socketio(socket))
  .configure(hooks)
  .configure(feathers.authentication({
    storage: window.localStorage
  }));
export default app;

// Reduxify feathers-client.authentication
export const feathersAuthentication = reduxifyAuthentication(app,
  { authSelector: (state) => state.auth.user}
);
// Reduxify feathers services
export const feathersServices = reduxifyServices(app, mapServicePathsToNames);
export const getFeathersStatus =
  (servicesRootState, names = prioritizedListServices) =>
    getServicesStatus(servicesRootState, names);

中间件和存储。 src / state / configureStore

redux-saga已被暂时删除,我将在完成测试后将其恢复

import { createBrowserHistory } from 'history';
import { createStore, applyMiddleware, compose } from "redux";
import { routerMiddleware  } from 'connected-react-router';
import createRootReducer from './ducks';
import promise  from 'redux-promise-middleware';
import reduxMulti from 'redux-multi';
import rootSaga from '../sagas';
import createSagaMiddleware from 'redux-saga';
export default function configureStore(initialState) {

    const composeEnhancer = window.__REDUX_DEVTOOLS_EXTENSION_COMPOSE__
        || compose;

    const middlewares = [
        //sagaMiddleware,
        promise,
        reduxMulti,
        routerMiddleware(history)];

    const store = createStore(
        createRootReducer(history),
        initialState,
        composeEnhancer(
            applyMiddleware(
                ...middlewares
            )
        )
    );

    return store;
}

根减速器,src / state / ducks / index.js

import { combineReducers } from "redux";
import { connectRouter } from 'connected-react-router';
import { reducer as reduxFormReducer } from 'redux-form';
import {feathersAuthentication, feathersServices} from '../../feathers';
import counter from './counter';

const rootReducer = (history) => combineReducers({
    counter,
    router: connectRouter(history),
    users: feathersServices.users.reducer,
    auth: feathersAuthentication.reducer,
    form: reduxFormReducer, // reducers required by redux-form

});

export default rootReducer;