Adonis JS - 哈希密码

Question

我经历过

1. http://adonisjs.com/docs/3.1/database-hooks#_hooks_events
2. http://adonisjs.com/docs/3.1/encryption-and-hashing#_hashing_values
3. https://adonisjs.svbtle.com/basic-authentication-with-adonisjs#using-hash-provider_3
4. https://auth0.com/blog/creating-your-first-app-with-adonisj-and-adding-authentication/

还有一些.

这应该相当简单,但我不知道为什么我无法解决这个问题.我想在"登录"时使用Adonis的身份验证工具.为此,我需要在保存之前散列密码.我被困在这里.

视图

<h1>Sign up</h1>
{{ form.open({url: '/addNew', action: 'UserController.addNewUser'}) }}

{{ csrfField }}

<div class="field">
{{ form.label('username', 'Choose a username') }}
{{ form.text('username') }}
</div>

<div class="field">
{{ form.label('email', 'Enter email address') }}
{{ form.text('email') }}
</div>

<div class="field">
{{ form.label('password', 'Choose a strong password') }}
{{ form.password('password') }}
</div>

<div class="button">
{{ form.submit('Sign Up') }}
</div>

{{ form.close() }}

控制器:UserController

'use strict'

const Database = use('Database')
const User = use('App/Model/User')
const user = new User()

class UserController {

* index (request, response) {
 const users = yield Database.select('*').from('users')
 response.json(users)
}

* addNewUser (request, response){

 user.name = request.input('username')
 user.email = request.input('email')
 user.password = request.input('password')
 user.entry = "Lorem Ipsum";

//Insert into database
  const userId = yield Database
 .insert({name: user.name, email: user.email, password: user.password, entry: user.entry})
 .into('users')

 response.json(userId)
 }
}
module.exports = UserController

型号:用户

'use strict'

const Lucid = use('Lucid')


class User extends Lucid {

static boot () {
   super.boot()
   this.addHook('beforeCreate', 'User.encryptPassword')
  }
}


module.exports = User

钩子:用户

'use strict'

const Hash = use('Hash')
const User = exports = module.exports = {}

User.encryptPassword = function * (next) {
  this.password = yield Hash.make(request.input('password'))
  yield next
}

谢谢!

Answer 1

有一种方法可以在不使用 Hook 或 Model 的情况下做到这一点。只需在控制器本身中对密码进行哈希处理即可。但我想用 Hook 来做到这一点。无论如何，这是代码：

控制器：UserController -> addNewUser()

user.name = request.input('username')
user.email = request.input('email')
const pswd = request.input('password')
user.password = yield Hash.make(pswd)

注意：我不确定 Hash.make 究竟执行哪种加密。但Adonis的加密工具无法验证密码。另一件事是，哈希密码始终以$2a$10$开头。各位请帮忙！