const jwt = require('jsonwebtoken');

//1. 验证用户名，密码是否正确
//2. 从新生成token信息
//3. 将生成的token信息存储在mongo中
//4. 将生成的token信息响应出去
User.findOne({
	name: req.body.name
}, (err, user) => {
	if (err) throw err
	if (!user) return res.fail("认证失败,用户不存在!");
	p.log(user)
	//校验密码是否正确
	if (user.password != req.body.password) return res.fail("认证失败,密码错误!");
	//密码正确，生成token，根据用户名生成token
	//将信息存储在 生成sign  
	let token = jwt.sign({
		name: user.name
	}, config.token_secret, {
		expiresIn: 60 * 1
	}) //token 信息，秘钥，过期时间（以秒为单位）
	user.token = token
	user.save((err) => {
		if (err) return res.fail("认证失败");
		return res.success({
			token: token,
			name: user.name
		});
	});
})

var headers = {
    'Content-Type': 'application/json',
    "token": "",
    "version": "1.0"
};
var options = {
	url: url,
	method: 'GET',
	headers: headers,
	json: true,
	timeout: config.timeout
};

request(options, function(error, response, content) {
	callback(error, response, content);
});

var str = sessionStorage.getItem("userInfo");
var currUser = JSON.parse(str);
var userId = currUser["userID"];
var token = 'Bearer ' + currUser.token;

function GetInfo(userId) {
    $.ajax({
        url: 'http://*******/api/orders',
        data: {
            currUserId: userId,
            type: 1
        },
        beforeSend: function(request) {
            request.setRequestHeader("token", token);
        },
        dataType: 'JSON',
        type: 'GET',
        success: function (list) {
        },
        error: function () {
        }
    });
}

var token = req.body.token || req.query.token || req.headers['x-access-token'];
var token = rq.body.token || rq.query.token || rq.headers["x-access-token"]; // 从body或query或者header中获取token
let token = req.body.token || req.query.token || req.headers.token;
if (_.isEmpty(token)) return res.fail("The token is lose")//token 信息丢失
req.headers.token = token

//最麻烦的
if (_.isEmpty(req.headers.token)) { //headers.token有值，直接跳转
	if (!_.isEmpty(req.body.token)) {
		req.headers.token = req.body.token;
	} else if (!_.isEmpty(req.query.token)) {
		req.headers.token = req.query.token;
	}

	if (_.isEmpty(req.headers.token)) return res.fail("The token is lose") //token 信息丢失
}

config.headers.Authorization = `Bearer ${store.state.token}`

let token = req.body.token || req.query.token || req.headers.token; //根据需要可以调整顺序
if (_.isEmpty(token)) return res.fail("The token is lose") //token 信息丢失

//校验token中包含的信息
jwt.verify(token, config.token_secret, function(err, data) {
	if (err) return res.fail(err.message);
	req.headers.token = token
	next()
})

User.findOne({
	token: token
}, (err, data) => {
	console.log(data)
	if (err) return res.fail("token is 失效");
	if (!data) return res.fail("token is null")
	next()
})

app.post('/refresh_token', function(req, res) {
	// verify the existing token 
	var profile = jwt.verify(req.body.token, secret);
	// if more than 14 days old, force login 
	if (profile.original_iat - new Date() > 14) {
		// iat == issued at return res.send(401); 
		// re-logging } 
		// check if the user still exists or if authorization hasn't been revoked 
		if (!valid) return res.send(401);
		// re-logging 
		// issue a new token 
		var refreshed_token = jwt.sign(profile, secret, {
			expiresInMinutes: 60 * 5
		});
		res.json({
			token: refreshed_token
		});
	}
});