rails api+react+jwt验证教程

rails new 项目名 --datebase=postgresql

rails g model user username password_digest

rails g controller users create

gem 'bcrypt', '~> 3.1.7'
gem 'jwt'

class User < ApplicationRecord
  has_secure_password
end

class ApplicationController < ActionController::Base
  protect_from_forgery except: :create
end

rails db:create db:migrate

resources:users

class UsersController < ApplicationControlle
  def create
      input = User.new(params.permit(:username, :password))
    if(input.save)
      :ok
    else
      :bad_request
     end
  end
end

rails g controller tokens create

Rails.application.routes.draw do
 
  get 'tokens/create'
  resources :users
  resources :tokens, only: [:create] 
  # For details on the DSL available within this file, see http://guides.rubyonrails.org/routing.html
end

class TokensController < ApplicationController
  def create

  	user = User.find_by(username: params[:username])
  	
  	if user&.authenticate(params[:password])
  	  render json: {
        jwt: encode_token({id: user.id, username: user.username})
  	  }
    else
     head :not_found
    end
   end

  private 

  def encode_token(payload={})
    exp = 24.hours.from_now
    payload[:exp] = exp.to_i
    JWT.encode(payload, Rails.application.credentials.fetch(:secret_key_base))
  end

end

rails secret

EDITOR=vim bin/rails credentials:edit

require_relative 'boot'

require 'rails/all'

# Require the gems listed in Gemfile, including any gems
# you've limited to :test, :development, or :production.
Bundler.require(*Rails.groups)

module Jwt
  class Application < Rails::Application
    # Initialize configuration defaults for originally generated Rails version.
    config.load_defaults 5.2

    config.generators.system_tests = nil

    config.middleware.insert_before 0, Rack::Cors do
      allow do
          origins '*'
          resource '*',headers: :any, methods: [
          :delete, :put, :patch, :get, :psot, :options



          ]
        
    end

    # Settings in config/environments/* take precedence over those specified here.
    # Application configuration can go into files in config/initializers
    # -- all .rb files in that directory are automatically loaded after loading
    # the framework and any gems in your application.
  end
end