Nodejs Nestjs插件passport-google-oauth20实现Google OAuth2.0认证的使用

Nodejs Nestjs插件passport-google-oauth20实现Google OAuth2.0认证的使用
在NestJS中使用passport-google-oauth20插件来实现Google OAuth2.0认证是一个常见的需求。下面将详细介绍如何配置和使用这个插件。

1. 安装必要的依赖

首先，你需要安装@nestjs/passport, passport, passport-google-oauth20以及@nestjs/jwt（如果你需要JWT认证）：

npm install @nestjs/passport passport passport-google-oauth20 @nestjs/jwt

2. 创建策略

创建一个GoogleOAuthStrategy类来处理Google OAuth2.0登录过程：

import { Injectable } from '@nestjs/common';
import { PassportStrategy } from '@nestjs/passport';
import { Strategy, VerifyCallback } from 'passport-google-oauth20';

@Injectable()
export class GoogleOAuthStrategy extends PassportStrategy(Strategy, 'google') {
  constructor() {
    super({
      clientID: 'YOUR_GOOGLE_CLIENT_ID',
      clientSecret: 'YOUR_GOOGLE_CLIENT_SECRET',
      callbackURL: 'http://localhost:3000/auth/google/callback',
      scope: ['profile', 'email'],
    });
  }

  async validate(
    accessToken: string,
    refreshToken: string,
    profile: any,
    done: VerifyCallback,
  ): Promise<any> {
    const { name, emails, photos } = profile;
    const user = {
      email: emails[0].value,
      firstName: name.givenName,
      lastName: name.familyName,
      picture: photos[0].value,
      accessToken,
    };
    done(null, user);
  }
}

3. 配置模块

在你的模块文件中配置Passport和GoogleOAuthStrategy：

import { Module } from '@nestjs/common';
import { AuthController } from './auth.controller';
import { AuthService } from './auth.service';
import { LocalStrategy } from './local.strategy';
import { PassportModule } from '@nestjs/passport';
import { JwtModule } from '@nestjs/jwt';
import { GoogleOAuthStrategy } from './google-oauth.strategy';

@Module({
  imports: [
    PassportModule.register({ defaultStrategy: 'google' }),
    JwtModule.register({
      secret: 'your_jwt_secret',
      signOptions: { expiresIn: '60m' },
    }),
  ],
  controllers: [AuthController],
  providers: [AuthService, LocalStrategy, GoogleOAuthStrategy],
})
export class AuthModule {}

4. 创建控制器

创建一个控制器来处理Google OAuth2.0登录请求：

import { Controller, Get, Req, Res } from '@nestjs/common';
import { Request, Response } from 'express';
import { AuthService } from './auth.service';

@Controller('auth')
export class AuthController {
  constructor(private readonly authService: AuthService) {}

  @Get('google')
  async googleAuth(@Req() req: Request, @Res() res: Response) {
    res.redirect(this.authService.googleAuth());
  }

  @Get('google/callback')
  async googleAuthRedirect(@Req() req: Request, @Res() res: Response) {
    try {
      const user = await this.authService.googleLogin(req);
      res.send(user);
    } catch (error) {
      res.status(500).send(error.message);
    }
  }
}

5. 配置服务

最后，在你的AuthService中添加处理逻辑：

import { Injectable } from '@nestjs/common';
import { PassportStrategy } from '@nestjs/passport';
import { Strategy } from 'passport-google-oauth20';

@Injectable()
export class AuthService {
  googleAuth() {
    return `https://accounts.google.com/o/oauth2/auth?client_id=${process.env.GOOGLE_CLIENT_ID}&redirect_uri=${process.env.GOOGLE_REDIRECT_URL}&response_type=code&scope=email%20profile`;
  }

  async googleLogin(req: Request) {
    if (!req.user) {
      throw new Error('User not authenticated');
    }
    return req.user;
  }
}

确保在环境变量中设置GOOGLE_CLIENT_ID, GOOGLE_CLIENT_SECRET, 和 GOOGLE_REDIRECT_URL。

以上就是使用passport-google-oauth20插件在NestJS中实现Google OAuth2.0认证的基本步骤。