您可以使用Passport.socketio来验证您的套接字连接。它表现得非常好。下面是一个示例应用程序:
var express = require('express');
var passport = require('passport');
var passportSocketIo = require("passport.socketio");
var cookieParser = require('cookie-parser');
var session = require('express-session');
var app = express();
var RedisStore = require('connect-redis')(session);
var sessionStore = new RedisStore({
host: 'localhost',
port: 6379,
db: 2,
});
app.use(session({
store: sessionStore,
secret: 'YOUR_SECRET_HERE'
}));
app.use(passport.initialize());
app.use(passport.session());
var io = require('socket.io').listen(http.createServer(app).listen(app.get('port'), function(){
console.log('Express server listening on port ' + app.get('port'));
}));
io.use(passportSocketIo.authorize({
cookieParser: cookieParser,
secret: 'YOUR_SECRET_HERE',
store: sessionStore,
}));
对于您的情况,您必须将角色添加到您的护照用户。该用户信息然后可以在访问socket.request.user
io.sockets.on('connection', function(socket) {
var user = socket.request.user;
if (user.role == true){
//do something
}
});
请注意,你必须使用一个sessionStore,本地存储不与护照工作。请参阅上面的Git页面以了解不同的可能性。