多种语言实现登录验证脚本代码示例及关键注意点

# 登录验证脚本代码示例以下是几种常见的登录验证实现方式： ## 1. 基础用户名密码验证 (Python Flask示例) ```python from flask import Flask, request, jsonify app = Flask(__name__) # 模拟用户数据库 users = { "admin": "password123", "user1": "mypassword" } @app.route('/login', methods=['POST']) def login(): data = request.get_json() username = data.get('username') password = data.get('password') if username in users and users[username] == password: return jsonify({"status": "success", "message": "登录成功"}), 200 else: return jsonify({"status": "error", "message": "用户名或密码错误"}), 401 if __name__ == '__main__': app.run(debug=True) ``` ## 2. 使用JWT令牌验证 (Node.js示例) ```javascript const express = require('express'); const jwt = require('jsonwebtoken'); const app = express(); app.use(express.json()); const SECRET_KEY = 'your_secret_key_here'; const users = [ { id: 1, username: 'admin', password: 'admin123' } ]; app.post('/login', (req, res) => { const { username, password } = req.body; const user = users.find(u => u.username === username && u.password === password); if (user) { const token = jwt.sign({ userId: user.id }, SECRET_KEY, { expiresIn: '1h' }); res.json({ token }); } else { res.status(401).json({ error: '认证失败' }); } }); // 受保护的路由 app.get('/protected', authenticateToken, (req, res) => { res.json({ message: '这是受保护的内容' }); }); function authenticateToken(req, res, next) { const authHeader = req.headers['authorization']; const token = authHeader && authHeader.split(' ')[1]; if (!token) return res.sendStatus(401); jwt.verify(token, SECRET_KEY, (err, user) => { if (err) return res.sendStatus(403); req.user = user; next(); }); } app.listen(3000, () => console.log('服务器运行中...')); ``` ## 3. 数据库验证 (Python SQLAlchemy示例) ```python from flask import Flask, request, jsonify from flask_sqlalchemy import SQLAlchemy from werkzeug.security import generate_password_hash, check_password_hash app = Flask(__name__) app.config['SQLALCHEMY_DATABASE_URI'] = 'sqlite:///users.db' db = SQLAlchemy(app) class User(db.Model): id = db.Column(db.Integer, primary_key=True) username = db.Column(db.String(80), unique=True, nullable=False) password_hash = db.Column(db.String(120), nullable=False) @app.route('/register', methods=['POST']) def register(): data = request.get_json() hashed_password = generate_password_hash(data['password'], method='sha256') new_user = User(username=data['username'], password_hash=hashed_password) db.session.add(new_user) db.session.commit() return jsonify({'message': '注册成功'}), 201 @app.route('/login', methods=['POST']) def login(): data = request.get_json() user = User.query.filter_by(username=data['username']).first() if user and check_password_hash(user.password_hash, data['password']): return jsonify({'message': '登录成功'}), 200 return jsonify({'message': '用户名或密码错误'}), 401 if __name__ == '__main__': db.create_all() app.run(debug=True) ``` ## 4. 前端登录表单 (HTML/JavaScript示例) ```html <!DOCTYPE html> <html> <head> <title>登录页面</title> </head> <body> <form id="loginForm"> <div> <label for="username">用户名:</label> <input type="text" id="username" name="username" required> </div> <div> <label for="password">密码:</label> <input type="password" id="password" name="password" required> </div> <button type="submit">登录</button> </form> <script> document.getElementById('loginForm').addEventListener('submit', async (e) => { e.preventDefault(); const username = document.getElementById('username').value; const password = document.getElementById('password').value; try { const response = await fetch('/api/login', { method: 'POST', headers: { 'Content-Type': 'application/json', }, body: JSON.stringify({ username, password }) }); const data = await response.json(); if (response.ok) { localStorage.setItem('token', data.token); alert('登录成功'); window.location.href = '/dashboard'; } else { alert(data.error || '登录失败'); } } catch (error) { console.error('登录错误:', error); alert('网络错误，请重试'); } }); </script> </body> </html> ``` ## 实现登录验证时需要注意的3个关键点： 1. 密码存储必须使用安全的哈希算法（如bcrypt、PBKDF2或Argon2），切勿明文存储 2. 实现适当的会话管理，包括会话超时和安全的令牌存储机制 3. 添加防止暴力破解的保护措施，如登录尝试限制和验证码 ######[AI写代码神器 | 1241点数解答 | 2025-06-19 18:09:49]

服务商

更多选项

快捷项

自定义