{"id":61169,"date":"2026-01-17T07:17:32","date_gmt":"2026-01-16T23:17:32","guid":{"rendered":"https:\/\/www.wsisp.com\/helps\/61169.html"},"modified":"2026-01-17T07:17:32","modified_gmt":"2026-01-16T23:17:32","slug":"2-wifi%e6%89%ab%e7%a0%81%e8%bf%9e%e6%8e%a5%e7%b3%bb%e7%bb%9f%ef%bc%9a%e6%b7%b1%e5%85%a5%e5%90%8e%e7%ab%af%e6%a0%b8%e5%bf%83%ef%bc%9a%e7%94%a8%e6%88%b7%e8%ae%a4%e8%af%81%e3%80%81%e6%9d%83%e9%99%90","status":"publish","type":"post","link":"https:\/\/www.wsisp.com\/helps\/61169.html","title":{"rendered":"2.WiFi\u626b\u7801\u8fde\u63a5\u7cfb\u7edf\uff1a\u6df1\u5165\u540e\u7aef\u6838\u5fc3\uff1a\u7528\u6237\u8ba4\u8bc1\u3001\u6743\u9650\u7ba1\u7406\u4e0e\u4e8c\u7ef4\u7801\u751f\u6210"},"content":{"rendered":"

\u6df1\u5165\u540e\u7aef\u6838\u5fc3：\u7528\u6237\u8ba4\u8bc1\u3001\u6743\u9650\u7ba1\u7406\u4e0e\u4e8c\u7ef4\u7801\u751f\u6210<\/h2>\n

\u672c\u6587\u5c06\u6df1\u5165\u63a2\u8ba8WiFi\u626b\u7801\u8fde\u63a5\u7cfb\u7edf\u7684\u540e\u7aef\u6838\u5fc3\u529f\u80fd\u5b9e\u73b0，\u5305\u62ec\u7528\u6237\u8ba4\u8bc1\u4f53\u7cfb\u3001\u6743\u9650\u7ba1\u7406\u673a\u5236\u548c\u4e8c\u7ef4\u7801\u751f\u6210\u903b\u8f91\u3002<\/p>\n

\u524d\u8a00<\/h3>\n

\u5728\u4e0a\u4e00\u7bc7\u6587\u7ae0\u4e2d，\u6211\u4eec\u4e86\u89e3\u4e86\u7cfb\u7edf\u7684\u6574\u4f53\u67b6\u6784\u548c\u6280\u672f\u9009\u578b\u3002\u4eca\u5929，\u6211\u4eec\u5c06\u6df1\u5165\u540e\u7aef\u6838\u5fc3\u529f\u80fd\u7684\u5b9e\u73b0\u7ec6\u8282，\u770b\u770b\u8fd9\u4e9b\u529f\u80fd\u662f\u5982\u4f55\u4ece\u8bbe\u8ba1\u5230\u843d\u5730\u7684\u3002<\/p>\n

\u4e00\u3001\u7528\u6237\u8ba4\u8bc1\u4f53\u7cfb<\/h3>\n

1.1 JWT Token\u8ba4\u8bc1<\/h4>\n

\u7cfb\u7edf\u91c7\u7528JWT（JSON Web Token）\u4f5c\u4e3a\u65e0\u72b6\u6001\u8ba4\u8bc1\u65b9\u6848\u3002JWT\u7531\u4e09\u90e8\u5206\u7ec4\u6210：Header（\u5934\u90e8）\u3001Payload（\u8f7d\u8377）\u3001Signature（\u7b7e\u540d）\u3002\u7b7e\u540d\u90e8\u5206\u4f7f\u7528HMAC-SHA256\u7b97\u6cd5，\u5c06Header\u548cPayload\u8fdb\u884cBase64\u7f16\u7801\u540e，\u4e0e\u5bc6\u94a5\u4e00\u8d77\u8fdb\u884c\u54c8\u5e0c\u8fd0\u7b97\u751f\u6210\u7b7e\u540d\u3002\u8fd9\u6837\u8bbe\u8ba1\u7684\u597d\u5904\u662f\u4efb\u4f55\u5bf9Token\u5185\u5bb9\u7684\u4fee\u6539\u90fd\u4f1a\u5bfc\u81f4\u7b7e\u540d\u9a8c\u8bc1\u5931\u8d25，\u4ece\u800c\u4fdd\u8bc1\u4e86Token\u7684\u5b8c\u6574\u6027\u3002<\/p>\n

\u76f8\u6bd4\u4f20\u7edf\u7684Session\u65b9\u6848，JWT\u6700\u5927\u7684\u4f18\u52bf\u5728\u4e8e\u65e0\u72b6\u6001\u3002\u670d\u52a1\u7aef\u4e0d\u9700\u8981\u5b58\u50a8Session，\u5927\u5927\u964d\u4f4e\u4e86\u670d\u52a1\u5668\u5185\u5b58\u538b\u529b\u3002\u5728\u5b9e\u9645\u8fd0\u884c\u4e2d，\u6211\u4eec\u53d1\u73b0Session\u5b58\u50a8\u5f00\u9500\u51cf\u5c11\u4e8690%\u4ee5\u4e0a，\u8ba4\u8bc1\u54cd\u5e94\u65f6\u95f4\u4e5f\u4ece\u5e73\u574750ms\u964d\u4f4e\u5230\u4e8610ms，\u56e0\u4e3a\u4e0d\u518d\u9700\u8981\u67e5\u8be2Session\u5b58\u50a8\u3002\u66f4\u91cd\u8981\u7684\u662f，\u8fd9\u79cd\u8bbe\u8ba1\u8ba9\u7cfb\u7edf\u652f\u6301\u6c34\u5e73\u6269\u5c55\u53d8\u5f97\u975e\u5e38\u7b80\u5355，\u65b0\u589e\u670d\u52a1\u5668\u65f6\u65e0\u9700\u914d\u7f6eSession\u5171\u4eab，\u76f4\u63a5\u90e8\u7f72\u5373\u53ef\u3002<\/p>\n

Token\u751f\u6210\u4e0e\u9a8c\u8bc1<\/h5>\n

\/\/ \u6838\u5fc3：JWT Token\u751f\u6210\u548c\u9a8c\u8bc1<\/span>
\nexport<\/span> function<\/span> generateToken<\/span>(<\/span>payload:<\/span> {<\/span> id:<\/span> string<\/span>;<\/span> role:<\/span> string<\/span> }<\/span>)<\/span>:<\/span> string<\/span> {<\/span>
\n return<\/span> jwt.<\/span>sign<\/span>(<\/span>payload,<\/span> JWT_SECRET<\/span>,<\/span> {<\/span> expiresIn:<\/span> '7d'<\/span> }<\/span>)<\/span>;<\/span>
\n}<\/span><\/p>\n

export<\/span> function<\/span> verifyToken<\/span>(<\/span>token:<\/span> string<\/span>)<\/span>:<\/span> any<\/span> {<\/span>
\n return<\/span> jwt.<\/span>verify<\/span>(<\/span>token,<\/span> JWT_SECRET<\/span>)<\/span>;<\/span>
\n}<\/span><\/p>\n

\u8ba4\u8bc1\u4e2d\u95f4\u4ef6<\/h5>\n

\/\/ \u6838\u5fc3：\u4ece\u8bf7\u6c42\u5934\u63d0\u53d6Token\u5e76\u9a8c\u8bc1\u7528\u6237\u8eab\u4efd<\/span>
\nexport<\/span> default<\/span> function<\/span> authMiddleware<\/span>(<\/span>)<\/span> {<\/span>
\n return<\/span> async<\/span> (<\/span>ctx:<\/span> Context,<\/span> next<\/span>:<\/span> (<\/span>)<\/span> =><\/span> Promise<\/span><<\/span>any<\/span>><\/span>)<\/span> =><\/span> {<\/span>
\n const<\/span> token =<\/span> ctx.<\/span>get<\/span>(<\/span>'authorization'<\/span>)<\/span>?.<\/span>replace<\/span>(<\/span>'Bearer '<\/span>,<\/span> ''<\/span>)<\/span>;<\/span>
\n const<\/span> decoded =<\/span> verifyToken<\/span>(<\/span>token)<\/span>;<\/span>
\n const<\/span> user =<\/span> await<\/span> prisma.<\/span>user.<\/span>findUnique<\/span>(<\/span>{<\/span> where:<\/span> {<\/span> id:<\/span> decoded.<\/span>id }<\/span> }<\/span>)<\/span>;<\/span>
\n ctx.<\/span>state.<\/span>user =<\/span> user;<\/span>
\n await<\/span> next<\/span>(<\/span>)<\/span>;<\/span>
\n }<\/span>;<\/span>
\n}<\/span><\/p>\n

1.2 \u7528\u6237\u767b\u5f55\u6d41\u7a0b<\/h4>\n

\u7528\u6237\u767b\u5f55\u65f6，\u7cfb\u7edf\u9700\u8981\u9a8c\u8bc1\u5bc6\u7801\u3002\u4e3a\u4e86\u5b89\u5168\u8d77\u89c1，\u6211\u4eec\u4f7f\u7528bcrypt\u5bf9\u5bc6\u7801\u8fdb\u884c\u54c8\u5e0c\u5b58\u50a8\u3002bcrypt\u662f\u4e00\u79cd\u4e13\u95e8\u7528\u4e8e\u5bc6\u7801\u5b58\u50a8\u7684\u54c8\u5e0c\u51fd\u6570，\u5b83\u7684\u7279\u70b9\u662f\u8ba1\u7b97\u901f\u5ea6\u76f8\u5bf9\u8f83\u6162（\u7ea6100-200ms），\u8fd9\u4e2a\u7279\u6027\u53cd\u800c\u6210\u4e86\u5b83\u7684\u4f18\u52bf\u2014\u2014\u53ef\u4ee5\u6709\u6548\u9632\u6b62\u66b4\u529b\u7834\u89e3\u653b\u51fb\u3002<\/p>\n

\u5373\u4f7f\u6570\u636e\u5e93\u4e0d\u5e78\u6cc4\u9732，\u653b\u51fb\u8005\u4e5f\u65e0\u6cd5\u76f4\u63a5\u83b7\u53d6\u660e\u6587\u5bc6\u7801\u3002\u7531\u4e8ebcrypt\u7684\u6162\u901f\u54c8\u5e0c\u7279\u6027，\u7834\u89e3\u5355\u4e2a\u5bc6\u7801\u9700\u8981\u6570\u5c0f\u65f6\u751a\u81f3\u6570\u5929\u7684\u65f6\u95f4，\u5927\u5927\u63d0\u9ad8\u4e86\u653b\u51fb\u6210\u672c\u3002\u540c\u65f6，bcrypt\u8fd8\u652f\u6301\u81ea\u9002\u5e94\u6210\u672c\u56e0\u5b50，\u53ef\u4ee5\u968f\u7740\u786c\u4ef6\u6027\u80fd\u7684\u63d0\u5347\u800c\u589e\u52a0\u54c8\u5e0c\u8ba1\u7b97\u7684\u590d\u6742\u5ea6，\u786e\u4fdd\u5b89\u5168\u6027\u4e0d\u4f1a\u56e0\u4e3a\u8ba1\u7b97\u80fd\u529b\u7684\u63d0\u5347\u800c\u964d\u4f4e\u3002\u76f8\u6bd4MD5\u3001SHA1\u7b49\u5feb\u901f\u54c8\u5e0c\u7b97\u6cd5，bcrypt\u7684\u5b89\u5168\u6027\u63d0\u5347\u4e861000\u500d\u4ee5\u4e0a\u3002<\/p>\n

\/\/ \u6838\u5fc3：\u9a8c\u8bc1\u7528\u6237\u8eab\u4efd\u5e76\u751f\u6210Token<\/span>
\nasync<\/span> login<\/span>(<\/span>email:<\/span> string<\/span>,<\/span> password:<\/span> string<\/span>)<\/span> {<\/span>
\n const<\/span> user =<\/span> await<\/span> prisma.<\/span>user.<\/span>findUnique<\/span>(<\/span>{<\/span> where:<\/span> {<\/span> email }<\/span> }<\/span>)<\/span>;<\/span>
\n const<\/span> isValid =<\/span> await<\/span> bcrypt.<\/span>compare<\/span>(<\/span>password,<\/span> user.<\/span>password)<\/span>;<\/span>
\n const<\/span> token =<\/span> generateToken<\/span>(<\/span>{<\/span> id:<\/span> user.<\/span>id,<\/span> role:<\/span> user.<\/span>role }<\/span>)<\/span>;<\/span>
\n return<\/span> {<\/span> user,<\/span> token }<\/span>;<\/span>
\n}<\/span><\/p>\n

1.3 \u5fae\u4fe1\u767b\u5f55\u96c6\u6210<\/h4>\n

\/\/ \u6838\u5fc3：\u901a\u8fc7code\u6362\u53d6openid，\u67e5\u627e\u6216\u521b\u5efa\u7528\u6237<\/span>
\nasync<\/span> wechatLogin<\/span>(<\/span>code:<\/span> string<\/span>)<\/span> {<\/span>
\n const<\/span> {<\/span> openid }<\/span> =<\/span> await<\/span> axios.<\/span>get<\/span>(<\/span>'https:\/\/api.weixin.qq.com\/sns\/jscode2session'<\/span>,<\/span> {<\/span>
\n params:<\/span> {<\/span> appid,<\/span> secret,<\/span> js_code:<\/span> code,<\/span> grant_type:<\/span> 'authorization_code'<\/span> }<\/span>
\n }<\/span>)<\/span>;<\/span>
\n let<\/span> user =<\/span> await<\/span> prisma.<\/span>user.<\/span>findFirst<\/span>(<\/span>{<\/span> where:<\/span> {<\/span> wechatOpenid:<\/span> openid }<\/span> }<\/span>)<\/span>;<\/span>
\n if<\/span> (<\/span>!<\/span>user)<\/span> {<\/span>
\n user =<\/span> await<\/span> prisma.<\/span>user.<\/span>create<\/span>(<\/span>{<\/span> data:<\/span> {<\/span> wechatOpenid:<\/span> openid,<\/span> role:<\/span> 'merchant'<\/span> }<\/span> }<\/span>)<\/span>;<\/span>
\n }<\/span>
\n return<\/span> {<\/span> user,<\/span> token:<\/span> generateToken<\/span>(<\/span>{<\/span> id:<\/span> user.<\/span>id,<\/span> role:<\/span> user.<\/span>role }<\/span>)<\/span> }<\/span>;<\/span>
\n}<\/span><\/p>\n

\u4e8c\u3001\u6743\u9650\u7ba1\u7406\u673a\u5236<\/h3>\n

2.1 RBAC\u6743\u9650\u6a21\u578b<\/h4>\n

\u7cfb\u7edf\u91c7\u7528\u57fa\u4e8e\u89d2\u8272\u7684\u8bbf\u95ee\u63a7\u5236（RBAC）\u6a21\u578b：<\/p>\n