响应标头中缺少 JWT 授权令牌

Question

我正在尝试使用JWT身份验证设置一个简单的Angularjs应用程序。

我给新注册的用户发了一封带有jwt令牌链接的邮件，以验证该邮件是否存在。链接如下所示:

< code > http://127 . 0 . 0 . 1:3000/verify email/eyj 0 exaioijkv 1 qilchbgcioijiuzi 1 nij 9 . eyj 1c 2 vytmftzsi 6 injpy 2 taawnwnvzgu 0 ds 5 ubcisinnjb 3 blijpbikn 3c r vbwvyil 0 simzpcnn 0 tmftz si 6 iljpy 2 silcjxn 0 tmftzsi 6 ikdvbw 1 lcnmilcjpyxqioj 0 ndk xnd C5 mzr 9

这就是我生成令牌的方式：

handler: function(request, reply) {
    request.payload.password = Common.encrypt(request.payload.password);
    request.payload.scope = "Customer";
    User.saveUser(request.payload, function(err, user) {
        if (!err) {
            var tokenData = {
                userName: user.userName, //email address
                scope: [user.scope],
                firstName: user.firstName,
                lastName: user.lastName
            };
            Common.sentMailVerificationLink(user,Jwt.sign(tokenData, privateKey));
            reply("Please confirm your email id by clicking on link in email");
        } else {
            if (11000 === err.code || 11001 === err.code) {
                reply(Boom.forbidden("please provide another user email"));
            } else {
                console.log(Boom.forbidden(err));
                reply(Boom.forbidden(err)); // HTTP 403
            }
        }
    });
}

现在，当我单击验证链接时，响应标头如下所示：

{ host: '127.0.0.1:3000',
  connection: 'keep-alive',
  accept: 'text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;
q=0.8',
  'upgrade-insecure-requests': '1',
  'user-agent': 'Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KH
TML, like Gecko) Chrome/46.0.2490.86 Safari/537.36',
  dnt: '1',
  'accept-encoding': 'gzip, deflate, sdch',
  'accept-language': 'nl-NL,nl;q=0.8,en-US;q=0.6,en;q=0.4,fr;q=0.2,es;q=0.2',
  'x-cookiesok': 'I explicitly accept all cookies' }

问题：我缺少响应标头中的授权令牌。如何在标头中发送授权令牌？

Answer 1

在 URL 中发送令牌，使其无法在标头中返回。你必须从网址中取回它。