此发送重置密码电子邮件的实现是否正确？

Question

我看过这篇文章了https://ahrjarrett.com/posts/2019-02-08-resetting-user-passwords-with-node-and-jwt了解如何在express中重置密码。

mailer.js


const nodemailer = require("nodemailer")

export const transporter = nodemailer.createTransport({
    service: "gmail",
    auth: {
        user: process.env.EMAIL,
        pass: process.env.PASSWORD
    }
})

export const getPasswordResetURL = (user, token) => {
    `http://localhost:3000/password/reset/${user._id}/${token}`
}

export const resetPasswordTemplate = (user, url) => {
    const from = process.env.EMAIL
    const to = user.email
    const subject = "Password Reset"
    const html = `
        <p>Hey ${user.name || user.email},</p>
        <p>We heard that you forgot your password. Sorry about that!</p>
        <p>But don’t worry! You can use the following link to reset your password:</p>
        <a href=${url}>${url}</a>
        <p>If you don’t use this link within 1 hour, it will expire.</p>
    `
}

return { from, to, subject, html }

emailController.js


const jwt = require("jsonwebtoken")
const bcrypt = require("bcrypt")
const User = require("../models/User")
import { transporter, getPasswordResetURL, resetPasswordTemplate } from "../utils/mailer"

export const usePasswordHashToMakeToken = ({
    password: passwordHash,
    _id: userId,
    createdAt
  }) => {
    const secret = passwordHash + "-" + createdAt
    const token = jwt.sign({ userId }, secret, {
      expiresIn: 3600 // 1 hour
    })
    return token
  }

  export const sendPasswordResetEmail = async (req, res) => {
    const { email } = req.params
    let user
    try {
      user = await User.findOne({ email }).exec()
    } catch (err) {
      res.status(404).json("No user with that email")
    }
    const token = usePasswordHashToMakeToken(user)
    const url = getPasswordResetURL(user, token)
    const emailTemplate = resetPasswordTemplate(user, url)

    const sendEmail = () => {
      transporter.sendMail(emailTemplate, (err, info) => {
        if (err) {
          res.status(500).json("Error sending email")
        }
        console.log(`** Email sent **`, info.response)
      })
    }
    sendEmail()
  }

  export const receiveNewPassword = (req, res) => {
    const { userId, token } = req.params
    const { password } = req.body

    User.findOne({ _id: userId })

      .then(user => {
        const secret = user.password + "-" + user.createdAt
        const payload = jwt.decode(token, secret)
        if (payload.userId === user.id) {
          bcrypt.genSalt(10, function(err, salt) {
            if (err) return
            bcrypt.hash(password, salt, function(err, hash) {
              if (err) return
              User.findOneAndUpdate({ _id: userId }, { password: hash })
                .then(() => res.status(202).json("Password changed accepted"))
                .catch(err => res.status(500).json(err))
            })
          })
        }
      })

      .catch(() => {
        res.status(404).json("Invalid user")
      })
  }

users.js

const express = require('express');
const router = express.Router();
const userController = require("../controllers/userController")
const emailController = require("../controllers/emailController")

router.post("/register", userController.registerUser)
router.post("/login", userController.loginUser)
router.get("/:userId", userController.getUser)
router.post("/user/:email", emailController.sendPasswordResetEmail)
router.post("/receive_new_password/:userId/:token", emailController.receiveNewPassword)


module.exports = router;

这给了我一个意外标记{的错误

从".../utils/mailer"导入{transaver， getPasswordResetURL， resetPasswordTemboard}

我可以将此导出const转换为module.exports并要求上述：

const{transporter，getPasswordResetURL，resetPasswordTemplate}=require（“../utils/mailer”）

Answer 1

正如您在问题中提到的，替换所有导出const并将其替换为

module.exports = {transporter, getPasswordResetURL, resetPasswordTemplate}

同时更换管路

import { transporter, getPasswordResetURL, resetPasswordTemplate } from "../utils/mailer"

到

const { transporter, getPasswordResetURL, resetPasswordTemplate } = require("../utils/mailer")

作为导入，导出是es6语法和要求，module.exports是es5语法。如果要使用导入，则需要配置Babel。

建议

最有可能的例子是，他同时使用es6和es5语法（他一定配置了babel）。但在你的情况下，我认为你没有配置巴贝尔。因此，我建议您要么配置babel，要么将所有es6语法更改为es5。在es6中可以使用es5，但在es5中不能使用es6