Crypto-js 和 Express 如何防止 crypto-js 在加密的 ID 中添加斜杠以防止服务器将其作为新的子路由读取？

Question

I am encrypting a user id using crypto-js to send it via url like the following for the user to validate it on click:

http://localhost:3000/api/customer/activate/U2FsdGVkX1DXzzLuf9TgBf31Mc2V/QBVAN05PovlNM

This is the encrypted user id:

U2FsdGVkX1DXzzLuf9TgBf31Mc2V/QBVAN05PovlNM

Using crypto-js encrypt :

crypto.AES.encrypt(term.toString(), config.CRYPTO_PASSPHRASE_RES).toString(crypto.enc.Utf8)

When I run the API, it return route not found , and when I remove / from the encrypted user id, it worked.

How can I prevent crypto-js from adding / into encrypted IDs?

Answer 1

The solution was to use encodeURIComponent() and then decodeURIComponent() like the following:

encodeURIComponent(crypto.AES.encrypt(term.toString(), config.CRYPTO_PASSPHRASE_RES).toString());

It will replace / into something else.