使用API​​ Key + Secret On Express保护我的RESTful API

Question

I have built a REStful API on Express and I would like to secure it with an authentication which requires a Public key, Hashed Private Key, and a Nonce as Headers similar to the way Coinbase or Potcoin operate. Problem is I cannot find the right library with an example of how to implement it. The closest is probably HMMAC , however its example does't work and it is even started in the file. My question is, how should I implement such a security for the REST API. Note that it has sensitive information for every user such as balance etc and it is meant for developers to consume our service. I just want to secure every GET, POST, PATCH endpoint on the API.

Answer 1

---

按建议使用JWT，效果相当不错。