node.js – 如何在节点js中创建和保存过期的用户令牌？

var mongoose = require( 'mongoose' );
var scheR_196_11845@a = mongoose.scheR_196_11845@a;

var Token = new scheR_196_11845@a({
    token: {type: String},createDate: {type: Date,default: Date.Now()}
});

Token.methods.hasExpired= function(){
    var Now = Date.Now();
    return (Now - Date.parse(createDatE)) > 604800000; // Date is converted to milliseconds to calculate 7 days it > one day = 24 hours * 60 minutes * 60 seconds *1000 milliseconds * 7 days = 604800000
};

//don't forget to add the token as a field in your user

mongoose.model( 'Token',Token);

接下来,在路由器中,在else子句中,我会将findOneAndupdate更改为findOne,因为您不是更新整个User对象,而只是更新它上面的属性.

require('crypto').randomBytes(48,buf) {
  var userToken = buf.toString('hex');
  User.findOne({email: (req.body.email)},usr) { 
            if(err || !usr) {
                console.log('err');             
            }
            usr.token = new Token(token:userToken);
            usr.save(function(err,usr){
                res.redirect('recoverpassword',message:'Your token was sent by email. Please enter it on the form below.'});
           };
        });
});

在用户发布其令牌的其他路线中,您将执行以下操作：

exports.postToken = function(req,next) {
    if(req.body.token === '') {
        console.log('err');
    } else {
        User.findOne({email: (req.body.email)},usr) {
            if(err || !usr) {
                console.log('err');             
            }
            if(usr.token == req.body.token && !usr.tokenHasExpired()) {
                usr.token = undefined;
                usr.tokenCreated = undefined;
                usr.save(function(err,usr){
                    res.redirect('index',message: 'Here is your password. Please dont lose it again',password: usr.passworD});
            });
            } else {
                res.redirect('recoverpassword',message:'The token is not set,or has expired. Though luck!'});
            }
        });
    });
};