两者都是用于身份验证的工具,但是Authguard是一个可重用的守卫,可以用于保护路由,确保只有已经经过身份验证的用户才可以访问该路由。而PassportStrategy是一个认证策略,用于设置验证逻辑和认证后的回调。
我们可以通过以下代码示例来进一步说明:
AuthGuard例子:
import { Injectable } from '@nestjs/common';
import { AuthGuard } from '@nestjs/passport';
@Injectable()
export class LocalAuthGuard extends AuthGuard('local') {}
在路由中使用LocalAuthGuard:
import { Controller, Request, Post, UseGuards } from '@nestjs/common';
import { LocalAuthGuard } from './local-auth.guard';
@Controller('auth')
export class AuthController {
@UseGuards(LocalAuthGuard)
@Post('login')
async login(@Request() req) {
return req.user;
}
}
PassportStrategy例子:
import { Injectable, UnauthorizedException } from '@nestjs/common';
import { PassportStrategy } from '@nestjs/passport';
import { Strategy } from 'passport-local';
import { AuthService } from './auth.service';
@Injectable()
export class LocalStrategy extends PassportStrategy(Strategy) {
constructor(private authService: AuthService) {
super();
}
async validate(username: string, password: string): Promise {
const user = await this.authService.validateUser(username, password);
if (!user) {
throw new UnauthorizedException();
}
return user;
}
}
在AuthModule中应用LocalStrategy:
import { Module } from '@nestjs/common';
import { AuthService } from './auth.service';
import { AuthController } from './auth.controller';
import { LocalStrategy } from './local.strategy';
@Module({
providers: [AuthService, LocalStrategy],
controllers: [AuthController],
})
export class AuthModule {}
在AuthController中使用Passport和LocalStrategy:
import { Controller, Request, Post, UseGuards } from '@nestjs/common';
import { AuthGuard } from '@nestjs/passport';
@Controller('auth')
export class AuthController {
@UseGuards(AuthGuard('local'))
@Post('login')
async login(@Request() req) {
return req.user;
}
}
总结:
AuthGuard和PassportStrategy都是用于身份验证的工具,但是它们的使用场景不同。AuthGuard可以用于守卫路由,确保只有已经经过身份验证的用户才可以访问该路由;而PassportStrategy用于设置验证逻辑和认证后的回调,在AuthModule中应用LocalStrategy,在AuthController中使用AuthGuard以确保路由安全。