是否可以检查 Parse 用户是否从服务器端登录？

Question

I am logging in/signing up users client side but I would like to check if their logged in from the server upon a page landing get request.

Is this possible?

Answer 1

您应该有一些服务器端来检查用户是否经过身份验证，这是一种安全的方式，因为您不能信任验证客户端，因为用户可以更改客户端代码。

Answer 2

You can create a Cloud Code function to check if the user is logged In. Some simple example:

Parse.Cloud.define('isLoggedIn', async (req) => {
  const { user } = req;

  if (!user) {
    return { isLogged: false };
  }

  const sessionToken = user.getSessionToken();

  try {
    const result = await Parse.Cloud.httpRequest({
      url: `${Parse.serverURL}/sessions/me`,
      headers: {
        "X-Parse-Application-Id": Parse.applicationId,
        "X-Parse-JavaScript-API-Key": Parse.javaScriptKey,
        "X-Parse-Session-Token": sessionToken,
      }
    });

    return { isLogged: true }
  } catch (e) {
    return { isLogged: false }
  }
});

Then you can use this cloud code function like this:

const isLoggedInFunc = async () => {
  const { isLoggedIn } = await Parse.Cloud.run("isLoggedIn");

  if (isLoggedIn) {
    // if logged in do what you want
  } else {
    // if not logged in do what you want
    // for example redirect user to login page or something ...
  }
}

Hope this will help :)