Node.js Uygulamalar\u0131nda JWT Kimlik Do\u011frulamas\u0131 \u0130\u00e7in 9 Ad\u0131m<\/p>\n
Node.js uygulamalar\u0131n\u0131zda g\u00fcvenli kimlik do\u011frulamas\u0131 i\u00e7in JWT (JSON Web Token) kullanman\u0131n en yayg\u0131n ve pop\u00fcler y\u00f6ntemlerinden biri oldu\u011funu biliyor muydunuz? JWT, kullan\u0131c\u0131n\u0131n kimlik bilgilerini g\u00fcvenli bir \u015fekilde iletmek ve do\u011frulamak i\u00e7in m\u00fckemmel bir \u00e7\u00f6z\u00fcmd\u00fcr.<\/p>\n
Bu makalede, Node.js uygulamalar\u0131n\u0131zda JWT kimlik do\u011frulamas\u0131 uygulamak i\u00e7in ad\u0131m ad\u0131m bir rehber sunaca\u011f\u0131m. JWT’nin temellerini, nas\u0131l \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 ve kendi uygulamalar\u0131n\u0131zda nas\u0131l kullanaca\u011f\u0131n\u0131z\u0131 ad\u0131m ad\u0131m g\u00f6sterece\u011fim. Haz\u0131r m\u0131s\u0131n\u0131z? Haydi ba\u015flayal\u0131m!<\/p>\n
JWT (JSON Web Token) k\u0131saca, kullan\u0131c\u0131n\u0131n kimlik bilgilerini ve ek bilgileri g\u00fcvenli bir \u015fekilde temsil eden bir standartt\u0131r. Bir JWT, \u00fc\u00e7 b\u00f6l\u00fcmden olu\u015fur:<\/p>\n
JWT’ler, uygulamalar aras\u0131nda verileri g\u00fcvenli bir \u015fekilde payla\u015fmak i\u00e7in kullan\u0131labilir. Bunlar, kullan\u0131c\u0131 oturum a\u00e7ma i\u015flemleri, yetkilendirme kontrol\u00fc ve API eri\u015fimi gibi bir\u00e7ok kullan\u0131m senaryosunda kullan\u0131\u015fl\u0131d\u0131r.<\/p>\n
\u015eimdi Node.js uygulamalar\u0131nda JWT kimlik do\u011frulamas\u0131 uygulamak i\u00e7in 9 ad\u0131ma daha yak\u0131ndan bakal\u0131m.<\/p>\n
Yeni bir Node.js projesi olu\u015fturun ve gerekli paketleri y\u00fckleyin:<\/p>\n
“`bash
\nmkdir my-jwt-app
\ncd my-jwt-app
\nnpm init -y
\nnpm install express jsonwebtoken bcryptjs cors
\n“`<\/p>\n
Bu komutlar: <\/p>\n
Kullan\u0131c\u0131 verilerini depolamak i\u00e7in bir model olu\u015fturun (\u00d6rne\u011fin, ‘user.js’):<\/p>\n
“`javascript
\nconst mongoose = require(‘mongoose’);
\nconst Schema = mongoose.Schema;<\/p>\n
const userSchema = new Schema({
\n username: {
\n type: String,
\n required: true,
\n unique: true
\n },
\n password: {
\n type: String,
\n required: true
\n }
\n});<\/p>\n
module.exports = mongoose.model(‘User’, userSchema);
\n“`<\/p>\n
Uygulaman\u0131z\u0131n kullanaca\u011f\u0131 veritaban\u0131na (MongoDB gibi) ba\u011flan\u0131n.\n<\/p>\n
“`javascript
\nconst mongoose = require(‘mongoose’);
\nconst mongoURI = ‘mongodb:\/\/localhost:27017\/my-jwt-app’; \/\/ Veritaban\u0131 ba\u011flant\u0131 bilgileri<\/p>\n
mongoose.connect(mongoURI, { useNewUrlParser: true, useUnifiedTopology: true })
\n .then(() => console.log(‘MongoDB ba\u011flant\u0131s\u0131 ba\u015far\u0131l\u0131.’))
\n .catch(err => console.error(‘MongoDB ba\u011flant\u0131 hatas\u0131:’, err));
\n“`<\/p>\n
Yeni kullan\u0131c\u0131lar\u0131 veritaban\u0131na eklemek i\u00e7in bir kay\u0131t (sign-up) rotas\u0131 olu\u015fturun:<\/p>\n
“`javascript
\nconst express = require(‘express’);
\nconst router = express.Router();
\nconst User = require(‘..\/models\/user’);
\nconst bcryptjs = require(‘bcryptjs’);<\/p>\n
router.post(‘\/signup’, async (req, res) => {
\n const { username, password } = req.body;<\/p>\n
try {
\n \/\/ Kullan\u0131c\u0131 ad\u0131 zaten var m\u0131 kontrol edin
\n const existingUser = await User.findOne({ username });
\n if (existingUser) {
\n return res.status(400).json({ message: ‘Kullan\u0131c\u0131 ad\u0131 zaten kullan\u0131l\u0131yor.’ });
\n }<\/p>\n
\/\/ Parola \u015fifreleyin
\n const hashedPassword = await bcryptjs.hash(password, 10);<\/p>\n
\/\/ Yeni kullan\u0131c\u0131y\u0131 veritaban\u0131na kaydedin
\n const newUser = new User({ username, password: hashedPassword });
\n await newUser.save();<\/p>\n
res.status(201).json({ message: ‘Kullan\u0131c\u0131 ba\u015far\u0131yla kaydedildi.’ });
\n } catch (err) {
\n console.error(err);
\n res.status(500).json({ message: ‘Bir hata olu\u015ftu.’ });
\n }
\n});<\/p>\n
module.exports = router;
\n“`<\/p>\n
Kullan\u0131c\u0131lar\u0131 kimlik do\u011frulamak i\u00e7in bir oturum a\u00e7ma (sign-in) rotas\u0131 olu\u015fturun:<\/p>\n
“`javascript
\nconst express = require(‘express’);
\nconst router = express.Router();
\nconst User = require(‘..\/models\/user’);
\nconst bcryptjs = require(‘bcryptjs’);
\nconst jwt = require(‘jsonwebtoken’);<\/p>\n
router.post(‘\/signin’, async (req, res) => {
\n const { username, password } = req.body;<\/p>\n
try {
\n const user = await User.findOne({ username });
\n if (!user) {
\n return res.status(401).json({ message: ‘Ge\u00e7ersiz kullan\u0131c\u0131 ad\u0131 veya parola.’ });
\n }<\/p>\n
\/\/ Parola do\u011frulamas\u0131n\u0131 yap\u0131n
\n const isValidPassword = await bcryptjs.compare(password, user.password);
\n if (!isValidPassword) {
\n return res.status(401).json({ message: ‘Ge\u00e7ersiz kullan\u0131c\u0131 ad\u0131 veya parola.’ });
\n }<\/p>\n
\/\/ JWT olu\u015fturun
\n const token = jwt.sign({ userId: user._id }, ‘secret-key’, { expiresIn: ‘1h’ });<\/p>\n
res.status(200).json({ token, message: ‘Oturum a\u00e7ma ba\u015far\u0131l\u0131.’ });
\n } catch (err) {
\n console.error(err);
\n res.status(500).json({ message: ‘Bir hata olu\u015ftu.’ });
\n }
\n});<\/p>\n
module.exports = router;
\n“`<\/p>\n
JWT’yi do\u011frulamak i\u00e7in bir middleware olu\u015fturun:<\/p>\n
“`javascript
\nconst express = require(‘express’);
\nconst jwt = require(‘jsonwebtoken’);<\/p>\n
const authMiddleware = (req, res, next) => {
\n const token = req.headers.authorization && req.headers.authorization.split(‘ ‘)[1];<\/p>\n
if (!token) {
\n return res.status(401).json({ message: ‘Ge\u00e7erli bir JWT tokeni sa\u011flamal\u0131s\u0131n\u0131z.’ });
\n }<\/p>\n
try {
\n const decoded = jwt.verify(token, ‘secret-key’);
\n req.user = decoded;
\n next();
\n } catch (err) {
\n console.error(err);
\n res.status(401).json({ message: ‘Ge\u00e7ersiz JWT tokeni.’ });
\n }
\n};<\/p>\n
module.exports = authMiddleware;
\n“`<\/p>\n
JWT middleware’ini kullanarak korunan rotalar olu\u015fturun:<\/p>\n
“`javascript
\nconst express = require(‘express’);
\nconst router = express.Router();
\nconst authMiddleware = require(‘..\/middleware\/auth’);<\/p>\n
router.get(‘\/protected’, authMiddleware, (req, res) => {
\n res.status(200).json({ message: ‘Bu bir korunan rota.’ });
\n});<\/p>\n
module.exports = router;
\n“`<\/p>\n
Uygulama sunucunuzu ba\u015flat\u0131n:<\/p>\n
“`javascript
\nconst express = require(‘express’);
\nconst cors = require(‘cors’);
\nconst signupRouter = require(‘.\/routes\/signup’);
\nconst signinRouter = require(‘.\/routes\/signin’);
\nconst protectedRouter = require(‘.\/routes\/protected’);<\/p>\n
const app = express();
\napp.use(cors());
\napp.use(express.json());<\/p>\n
app.use(‘\/api\/v1\/auth’, signupRouter);
\napp.use(‘\/api\/v1\/auth’, signinRouter);
\napp.use(‘\/api\/v1\/protected’, protectedRouter);<\/p>\n
app.listen(3000, () => {
\n console.log(‘Sunucu 3000 portunda \u00e7al\u0131\u015f\u0131yor.’);
\n});
\n“`<\/p>\n
JWT g\u00fcvenli\u011fi i\u00e7in a\u015fa\u011f\u0131daki hususlara dikkat etmek \u00f6nemlidir:<\/p>\n
Bu makalede, Node.js uygulamalar\u0131n\u0131zda JWT kimlik do\u011frulamas\u0131 uygulama ad\u0131mlar\u0131n\u0131 inceledik. JWT g\u00fcvenli\u011fi i\u00e7in \u00f6nemli ipu\u00e7lar\u0131n\u0131 da ele ald\u0131k. JWT, g\u00fcvenli ve etkili bir kimlik do\u011frulama mekanizmas\u0131d\u0131r ve Node.js uygulamalar\u0131n\u0131z\u0131 geli\u015ftirmek i\u00e7in kullanabilece\u011finiz de\u011ferli bir ara\u00e7t\u0131r.<\/p>\n
JWT’ler hakk\u0131nda daha fazla bilgi edinmek ve uygulaman\u0131z i\u00e7in en uygun \u015fekilde nas\u0131l kullan\u0131laca\u011f\u0131n\u0131 \u00f6\u011frenmek i\u00e7in JWT.io<\/a> dok\u00fcmantasyonuna g\u00f6z atabilirsiniz. <\/p>\n