Node（十二）加密解密

token：（引入jsonwebtoken模块）

对称加密，一个秘钥进行加密解密

const crypto = require('crypto');

// 产生token

let obj = {

    a: 1,

    b: 2,

};

let sec = 'HelloWorld'

let res = jwt.sign(obj, sec,{ algorithm: 'RS256'});//传入加密的对象，秘钥，加密方式

console.log(res);

//解析token

let sec2 = jwt.verify('eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhIjoxLCJiIjoyLCJpYXQiOjE1NDM5ODA0NTF9.ORMQa_LBbDCd7XEEHgVGN2EnccL2kTOyDidE-b4ANMY', sec);

console.log(sec2);

非对称加密，通过私钥进行加密，公钥解密

产生私钥 openssl genrsa -out private_key.pem 1024

由私钥产生公钥 openssl rsa -in private_key.pem -pubout -out public_key.pem

var selfkey = fs.readFileSync(path.join(__dirname, 'key.pem'));//读取私钥路径
var jwtset = jwt.sign({
    a: 1,
    b: 2,
    c: 3
}, selfkey, {
    algorithm: 'RS256'
});
console.log(jwtset);

var otherkey = fs.readFileSync(path.join(__dirname, 'public_key.pem'));//读取公钥路径
var jwtget = jwt.verify(jwtset, otherkey, {
    algorithm: 'RS256'
});
console.log(jwtget);

crypto和bcrypt

// 数据库密码加密
// 内置crypto
// MD5
const hash = crypto.createHash('md5');
hash.update('HelloWorld');
console.log(hash.digest('hex'));
// Hmac
const hmac = crypto.createHmac('sha256', '12345');
hmac.update('HelloWorld');
console.log(hmac.digest('hex'));
// 第三方bcrypt
const pass = 'qazwsx123';
const saltRounds = 10;
bcrypt.genSalt(saltRounds, (err, salt) => {
    bcrypt.hash(pass, salt, (err, hash) => {
        let result= bcrypt.compareSync('qazwsx123', hash);
        console.log(result);
    });
});