gpt4 book ai didi

javascript - Apollo 客户端未在 Nextjs Lamda 中发送 JWT 不记名 token

转载 作者:行者123 更新时间:2023-12-01 15:28:11 35 4
gpt4 key购买 nike

TLDR

header authorization 没有随 apollo 一起发送。这导致 You do not have the appropriate capabilities to perform this action

const apolloClient = ({ cookies: { token = null }, headers }) => {
const authLink = setContext(_ => {
console.info(token) //correct tokens
return {
headers: {
...headers,
authorization: `Bearer ${token}`,
},
}
})

return new ApolloClient({
link: ApolloLink.from([
onError(({ graphQLErrors, networkError }) => {
console.error(graphQLErrors, networkError)
}),
authLink.concat(
createHttpLink({
uri: graphQL,
credentials: 'same-origin',
fetch: fetch,
})
),
]),
cache: new InMemoryCache(),
})
}

长版

我需要在我的 nextjs lamba 文件之一中对自己进行身份验证,该文件现在位于 /pages/api/*

我目前有一个 apollo.serverless.js 文件,它被导入到我进行数据库交互的 pages/api/users/update/role/[userId].js 中。

这对我来说有点困惑。我不确定这是唯一的方法,但这是我的大脑带我去的地方。我正在传递 req
into
apollo.serverless.js`,以便我可以访问 cookie 中的不记名 token 。

这可能就像我的 apollo.client 设置不正确一样简单。

我正在直接测试链接 http://localhost:3000/api/users/update/role/dXNlcjoxMTg= 因为 strip webhook 将使用查询参数直接访问此 url。

pages/api/users/update/role/[userId].js

import { useQuery, useMutation } from '../../../../../lib/apollo/apollo.serverless'
import { updateMemberRole, allUsers } from '../../../queries/users'

export default async (req, res) => {
let data
try {
const mutationInfo = await useMutation(
{
mutation: updateMemberRole,
variables: {
userId: req.query.userId,
},
},
req
)
data = mutationInfo.data
} catch (err) {
data = err
}
res.status(200).json({ data })
}



使用 [userId] 发送的 header
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9,en-GB;q=0.8,fr;q=0.7
Cache-Control: no-cache
Connection: keep-alive
Cookie: analyticsCookieAccepted=1; analyticsCookieNoticeClosed=1; _ga=GA1.1.2044509544.1574855120; wordpress_test_cookie=WP+Cookie+check; OPTOUTMULTI=0:0%7Cc4:0%7Cc3:0%7Cc2:0; wp-settings-45=editor%3Dhtml%26libraryContent%3Dbrowse%26imgsize%3Dfull; wp-settings-time-45=1575018303; theme=light; wp-settings-time-1=1575496501; utag_main=v_id:016eacdb7ad1001fa3af49cf1fec01069001606100fb8$_sn:18$_se:1$_ss:1$_st:1575891251585$ses_id:1575889451585%3Bexp-session$_pn:1%3Bexp-session; wordpress_logged_in_86a9106ae65537651a8e456835b316ab=glasshousegames%7C1578351721%7CtL4KMHIW7tTAUuCzUOJd8r6Mu5buST9mheH2tn9WFQs%7C593e133b11f6c0745f577e32d66db0cf1ccfa012504f9015fc64c515d2df77d2; token=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJodHRwOlwvXC9sb2NhbGhvc3QiLCJpYXQiOjE1NzgwNTgyOTIsIm5iZiI6MTU3ODA1ODI5MiwiZXhwIjoxNTc4NjYzMDkyLCJkYXRhIjp7InVzZXIiOnsiaWQiOiIxMTgifX19.iMSh4KjuON3otpOqO3TXpYAh2bQYu48sqm9pzsgeBis
Host: localhost:3002
Pragma: no-cache
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36

apollo.serverless.js

import dotenv from 'dotenv'
import { fetch } from 'cross-fetch/polyfill'
import { createHttpLink } from 'apollo-link-http'
import { ApolloClient } from 'apollo-client'
import { InMemoryCache } from 'apollo-cache-inmemory'
import { setContext } from 'apollo-link-context'
import { onError } from 'apollo-link-error'
import { ApolloLink } from 'apollo-link'
import { graphQL } from 'app.config'
import ApolloClass, { sortParams } from '~/lib/apollo/apollo.class'

dotenv.config()

const apolloClient = ({ cookies: { token = null }, headers }) => {
const authLink = setContext(_ => {
return {
headers: {
...headers,
authorization: `Bearer ${token}`,
},
}
})

return new ApolloClient({
link: ApolloLink.from([
onError(({ graphQLErrors, networkError }) => {
if (graphQLErrors)
graphQLErrors.forEach(({ message, locations, path }) => console.log(`[GraphQL error]: Message: ${message}, Location: ${locations}, Path: ${path}`))
if (networkError) console.log(`[Network error]: ${networkError}`)
}),
authLink.concat(
createHttpLink({
uri: graphQL,
credentials: 'same-origin',
fetch: fetch,
})
),
]),
cache: new InMemoryCache(),
})
}

export const useQuery = async function(query) {
const { options = {} } = sortParams([...arguments])
const { loading, data: queryData, error, ...props } = await apolloClient.query({
query,
...options,
})
let transformData = {}

if (queryData) transformData = new ApolloClass(queryData).start()
return {
queryData,
error,
loading,
data: transformData,
}
}

export const useMutation = async function(mutation, req) {
const { data } = await apolloClient(req).mutate(mutation)
return { data }
}


错误
// 20200106132714
// http://localhost:3002/api/users/update/role/dXNlcjoxMTg=

{
"data": {
"graphQLErrors": [
{
"message": "You do not have the appropriate capabilities to perform this action",
"category": "user",
"locations": [
{
"line": 2,
"column": 3
}
],
"path": [
"updateUser"
]
}
],
"networkError": null,
"message": "GraphQL error: You do not have the appropriate capabilities to perform this action"
}
}

所以我认为问题在于我的 header 没有被发送,因为我在这里详细的 header 中看不到它们,在查看 http://localhost:3000/api/users/update/role/cm9sZTpzdGFuZGFyZA== 时我在 header 中看不到它们

值得一提的是,我使用 GraphQL 和 wp-GraphQL 和 JWT 作为我的身份验证 token 。并使用 JWT Authentication for WP REST API 处理 JWT token 。我没有引起更多关注的原因是我在标题中看不到任何 Bearer SomeToken,所以我确信一旦发送 token ,一切正常。 JWT 在我与 cookie 的所有交互中都能正常工作。

.htaccess
RewriteCond %{HTTP:Authorization} ^(.)
RewriteRule ^(.) - [E=HTTP_AUTHORIZATION:%1]
SetEnvIf Authorization "(.*)" HTTP_AUTHORIZATION=$1

<ifmodule mod_headers.c="">
# SetEnvIf Origin "^(.*\.domain\.com)$" ORIGIN_SUB_DOMAIN=$1
SetEnvIf Origin "http(s)?://(www\.)?(localhost|now.sh|dev.domain1.games)$" ORIGIN_SUB_DOMAIN=$1
Header set Access-Control-Allow-Origin "%{ORIGIN_SUB_DOMAIN}e" env=ORIGIN_SUB_DOMAIN
Header set Access-Control-Allow-Methods: "*"
Header set Access-Control-Allow-Headers: "Origin, X-Requested-With, Content-Type, Accept, Authorization, Content-Disposition"
</ifmodule>

<IfModule mod_expires.c>
ExpiresActive On
ExpiresByType image/jpg "access 1 year"
ExpiresByType image/jpeg "access 1 year"
ExpiresByType image/gif "access 1 year"
ExpiresByType image/png "access 1 year"
ExpiresByType text/css "access 1 month"
ExpiresByType text/html "access 1 month"
ExpiresByType application/pdf "access 1 month"
ExpiresByType text/x-javascript "access 1 month"
ExpiresByType application/x-shockwave-flash "access 1 month"
ExpiresByType image/x-icon "access 1 year"
</IfModule>

最佳答案

将此添加到您的 .htaccess 文件中

SetEnvIf Authorization "(.*)" HTTP_AUTHORIZATION=$1

关于javascript - Apollo 客户端未在 Nextjs Lamda 中发送 JWT 不记名 token ,我们在Stack Overflow上找到一个类似的问题: https://stackoverflow.com/questions/59543955/

35 4 0
Copyright 2021 - 2024 cfsdn All Rights Reserved 蜀ICP备2022000587号
广告合作:1813099741@qq.com 6ren.com