vue基于session和github-oauth2实现登录注册验证思路详解_Javascript

本文简介

本文讲解前端通过简单的方式实现一个基本的登录注册验证功能。在后端，使用 session 表来存储会话信息，并让前端的 localstorage 存储 sessionid。通过 sessionid 可以在 session 表中获取用户的信息。此外，还利用 session 表实现了 github 的 oauth2 第三方登录。

基本思路

在本项目中，我们使用 vue 作为前端框架，通过与后端 api 交互来管理用户的会话状态。

用户注册和登录：用户在前端输入用户名和密码，通过表单提交到后端进行验证。成功登录后，后端返回一个 sessionid，前端将其存储在localstorage中。
会话管理：前端在每次请求时会在请求头中附带 sessionid，以便后端能够验证用户的身份。
第三方登录：用户点击github登录按钮后，前端会重定向到github的授权页面。用户授权后，github重定向回我们的网站，并附带授权码。前端将授权码发送到后端服务器以换取访问令牌。

框架版本

vue 3
pinia (用于状态管理)
vue router (用于路由管理)
axios (用于 http 请求)
tailwind (用于css)
element-plus (用于css)

开源地址

后端地址：springboot-session-github-oauth

前端地址：vite-session-github-oauth

主要学习点

路由守卫

路由守卫确保只有经过身份验证的用户才能访问某些页面。

// 添加全局前置守卫
router.beforeeach(async (to, from, next) => {
    if (to.name == "home") {
        const sessionid = ref("");
        const sessionidfromurl = to.query.sessionid as string;
        if (sessionidfromurl) {
            sessionid.value = sessionidfromurl;
            localstorage.setitem('sessionid', sessionidfromurl);
        } else if (localstorage.getitem('sessionid')) {
            sessionid.value = localstorage.getitem('sessionid') || '';
        }
        if (sessionid.value == '') {
            // 没有 sessionid，重定向到登录页面
            return next({ name: 'login' });
        } else {
            try {
                // 验证 sessionid 是否有效
                const response = await axios.get('http://localhost:8080/auth/home', {
                    params: { sessionid: sessionid.value }
                });
                if (response.data && response.data.data) {
                    // 如果 username 存在，则 sessionid 有效
                    localstorage.setitem('username', response.data.data);
                    next();
                } else {
                    // 如果无效，清除 localstorage 并重定向到登录页面
                    localstorage.removeitem('sessionid');
                    next({ name: 'login' });
                }
            } catch (error) {
                console.error('验证 sessionid 失败:', error);
                localstorage.removeitem('sessionid');
                next({ name: 'login' });
            }
        }
    } else {
        // 如果目标路由是登录页面，直接继续导航
        next();
    }
});

代码设计

<script setup lang="ts">
import { ref } from 'vue';
import axios from 'axios';
import router from '../routes.ts';
const username = ref('');
const password = ref('');
const handlelogin = async () => {
  try {
    const response = await axios.post('http://localhost:8080/auth/login',{
      username: username.value,
      password: password.value
    });
    localstorage.setitem('sessionid', response.data.data);
    console.log(response.data.data);
    await router.push('/home');
  } catch (error) {
    console.log(error);
  }
}
const handleloginbygithub = () => {
  window.location.href = 'http://localhost:8080/oauth/authorize';
}
</script>
<template>
  <div class="flex justify-center items-center min-h-screen bg-gray-2">
    <div class="w-full max-w-md p-8 space-y-8 bg-white rounded-lg shadow-lg">
      <h2 class="text-2xl font-bold text-center text-gray-800">
        客户端登录（session登录）
      </h2>
      <form class="space-y-6" @submit.prevent>
        <div>
          <label for="username" class="block text-sm font-medium text-gray-700">
            用户名
          </label>
          <input v-model="username" id="username" name="username" type="text" required
                 class="w-full px-3 py-2 mt-1 border border-gray-300 rounded-lg focus:ring-indigo-500 focus:border-indigo-500" />
        </div>
        <div>
          <label for="password" class="block text-sm font-medium text-gray-700">
            密码
          </label>
          <input v-model="password" id="password" name="password" type="password" required
                 class="w-full px-3 py-2 mt-1 border border-gray-300 rounded-lg focus:ring-indigo-500 focus:border-indigo-500" />
        </div>
        <div class="flex justify-end">
          <router-link to="/register">
            还没有账号，点击注册
          </router-link>
        </div>
        <div>
          <button type="submit"
                  class="w-full px-4 py-2 font-semibold text-white bg-indigo-600 rounded-lg hover:bg-indigo-700 focus:outline-none focus:ring-2 focus:ring-indigo-500 focus:ring-offset-2"
                  @click="handleloginbygithub">
            使用gihub登录
          </button>
        </div>
        <div>
          <button type="submit"
                  class="w-full px-4 py-2 font-semibold text-white bg-indigo-600 rounded-lg hover:bg-indigo-700 focus:outline-none focus:ring-2 focus:ring-indigo-500 focus:ring-offset-2"
                  @click="handlelogin">
            登录
          </button>
        </div>
      </form>
    </div>
  </div>
</template>
<style scoped></style>

<script setup lang="ts">
import { ref } from 'vue';
import axios from 'axios';
import router from '../routes';
const username = ref('');
const password = ref('');
const handleregister = async () => {
  try {
    const response = await axios.post('http://localhost:8080/auth/register', {
      username: username.value,
      password: password.value,
    });
    console.log(response.data);
    localstorage.setitem('sessionid', response.data.data);
    await router.push('/home');
  } catch (error) {
    console.log(error);
  }
};
</script>
<template>
  <div class="flex justify-center items-center min-h-screen bg-gray-100">
    <div class="w-full max-w-md p-8 space-y-8 bg-white rounded-lg shadow-lg">
      <h2 class="text-2xl font-bold text-center text-gray-800">
        客户端注册(session注册)
      </h2>
      <form class="space-y-6" @submit.prevent="handleregister">
        <div>
          <label for="username" class="block text-sm font-medium text-gray-700">
            用户名
          </label>
          <input v-model="username" id="username" name="username" type="text" required
                 class="w-full px-3 py-2 mt-1 border border-gray-300 rounded-lg focus:ring-indigo-500 focus:border-indigo-500" />
        </div>
        <div>
          <label for="password" class="block text-sm font-medium text-gray-700">
            密码
          </label>
          <input v-model="password" id="password" name="password" type="password" required
                 class="w-full px-3 py-2 mt-1 border border-gray-300 rounded-lg focus:ring-indigo-500 focus:border-indigo-500" />
        </div>
        <div class="flex justify-end">
          <router-link to="/login">
            已有账号？点击登录
          </router-link>
        </div>
        <div>
          <button type="submit"
                  class="w-full px-4 py-2 font-semibold text-white bg-indigo-600 rounded-lg hover:bg-indigo-700 focus:outline-none focus:ring-2 focus:ring-indigo-500 focus:ring-offset-2"
                  @click.prevent="handleregister">
            注册
          </button>
        </div>
      </form>
    </div>
  </div>
</template>
<style scoped></style>

home.vue

<script setup lang="ts">
import { onmounted, ref } from 'vue';
import axios from 'axios';
import router from '../routes';
import { elmessage } from 'element-plus';
const username = ref('');
const sessionid = ref('');
const state = ref('');
const showpassworddialog = ref(false);
const newpassword = ref('');
const confirmpassword = ref(''); // new ref for confirming password
username.value = localstorage.getitem('username');
sessionid.value = localstorage.getitem('sessionid');
console.log(sessionid.value);
const handlestate = async () => {
  try {
    const response = await axios.get('http://localhost:8080/user/state', {
      params: {
        sessionid: sessionid.value
      }
    });
    state.value = response.data.data;
  } catch (error) {
    console.log(error);
  }
};
const handleaddpassword = async () => {
  if (newpassword.value !== confirmpassword.value) {
    elmessage.error('passwords do not match');
    return;
  }
  try {
    const response = await axios.post('http://localhost:8080/user/addpassword', {
      password: newpassword.value
    }, {
      params: {
        sessionid: sessionid.value,
      }
    });
    console.log(response.data);
    if (response.data.status === 'ok') {
      elmessage.success('password added successfully');
      showpassworddialog.value = false;
      newpassword.value = '';
      confirmpassword.value = ''; // reset password fields
    } else {
      elmessage.error('failed to add password');
    }
  } catch (error) {
    console.log(error);
    elmessage.error('an error occurred while adding the password');
  }
};
const handleloginbygithub = async () => {
  window.location.href = 'http://localhost:8082/oauth/authorize?sessionid=' + sessionid.value;
}
const handlelogout = async () => {
  try {
    const response = await axios.get('http://localhost:8080/auth/logout', {
      params: {
        sessionid: sessionid.value
      }
    });
    localstorage.removeitem('sessionid');
    sessionid.value = '';
    await router.push('/login');
    console.log(response.data);
  } catch (error) {
    console.log(error);
  }
};
// execute on component mount
onmounted(() => {
  handlestate();
});
</script>
<template>
  <div class="flex justify-center items-center min-h-screen bg-gray-2">
    <div class="w-full max-w-md p-8 space-y-8 bg-white rounded-lg shadow-lg">
      <h2 class="text-2xl font-bold text-center text-gray-800">
        使用session登录成功
      </h2>
      <p class="text-center text-gray-600">
        欢迎回来, {{ username }}
      </p>
      <div v-if="state == 'password'" class="flex justify-end">
        <button
            class="px-4 py-2 font-semibold text-white bg-indigo-600 rounded-lg hover:bg-indigo-700 focus:outline-none focus:ring-2 focus:ring-indigo-500 focus:ring-offset-2"
            @click="showpassworddialog = true">
          添加密码
        </button>
      </div>
      <div v-else-if="state == 'githubloginname'" class="flex justify-end">
        <button
            class="px-4 py-2 font-semibold text-white bg-indigo-600 rounded-lg hover:bg-indigo-700 focus:outline-none focus:ring-2 focus:ring-indigo-500 focus:ring-offset-2"
            @click="handleloginbygithub">
          绑定github账号
        </button>
      </div>
      <div class="flex justify-end">
        <button
            class="px-4 py-2 font-semibold text-white bg-indigo-600 rounded-lg hover:bg-indigo-700 focus:outline-none focus:ring-2 focus:ring-indigo-500 focus:ring-offset-2"
            @click="handlelogout">
          退出
        </button>
      </div>
    </div>
  </div>
  <!-- password dialog -->
  <el-dialog v-model="showpassworddialog" title="添加密码" width="500" draggable>
    <div class="space-y-4">
      <!-- new password -->
      <div class="flex items-center space-x-4">
        <label for="newpassword" class="text-sm font-medium text-gray-700">
          输入密码
        </label>
        <input v-model="newpassword" id="newpassword" name="newpassword" type="password" required
               class="w-5/6 px-4 py-2 border border-gray-300 rounded-lg focus:ring-indigo-500 focus:border-indigo-500" />
      </div>
      <!-- confirm password -->
      <div class="flex items-center space-x-4">
        <label for="confirmpassword" class="text-sm font-medium text-gray-700">
          确认密码
        </label>
        <input v-model="confirmpassword" id="confirmpassword" name="confirmpassword" type="password" required
               class="w-5/6 px-4 py-2 border border-gray-300 rounded-lg focus:ring-indigo-500 focus:border-indigo-500" />
      </div>
    </div>
    <template #footer>
      <div class="dialog-footer">
        <el-button @click="showpassworddialog = false">取消</el-button>
        <el-button type="primary" @click="handleaddpassword">确定</el-button>
      </div>
    </template>
  </el-dialog>
</template>
<style scoped></style>

到此这篇关于vue基于session和github-oauth2实现登录注册验证的文章就介绍到这了,更多相关vue登录注册验证内容请搜索代码网以前的文章或继续浏览下面的相关文章希望大家以后多多支持代码网！