在 URL 中隐藏参数值 (guid)

Question

在我的路线上

.when('/user:user_guid',{
        templateUrl : 'users/profile.html',
        controller : 'userController'
    })

在我的index.html内ng-repeat我有

<a href="#/user/:{{user.user_guid}}">view profile</a>

它有效，但在我的 URL 中，我看到 guid 已暴露。有什么方法可以隐藏吗？

Answer 1

使用ng-click

<a ng-click="go_url(user)">view profile</a>

然后在某个控制器中

//it has many possible solutions, this is one of them
//according to your config, you're using angular route provider
$scope.go_url = function(_user){
    //be sure to inject $location service
    $location.path('/user/' + _user.user_guid);
}

如果您不想在浏览器中公开 URL，请使用可以在内部保存 guid 变量的服务，并在用户导航到 /user

时抓取它

这是演示

angular.module('demo', ['ngRoute']);
  angular.module('demo').config(function($routeProvider){
    $routeProvider
    .when('/welcome', {
      templateUrl: 'welcome_page'
    })
    .when('/user', {
      templateUrl: 'hello_page'
    })
    .otherwise({redirectTo: '/welcome'});
  });
  angular.module('demo').service('SecretServ', function(){
    this.secret_guid = '';
  });
  angular.module('demo').controller('Controller1', function($scope, $location, SecretServ){
    $scope.user = {
      guid: '123345567234'
    };
    $scope.go = function(){
      SecretServ.secret_guid = $scope.user.guid;
      $location.path('/user');
    };
  });
  angular.module('demo').controller('Controller2', function($scope, SecretServ, $location){
    $scope.guid = SecretServ.secret_guid;
    $scope.exit = function(){
      $location.path('/welcome');
    }
  });

<script src="https://code.angularjs.org/1.4.4/angular.js"></script>

<script src="https://code.angularjs.org/1.4.4/angular-route.js"></script>

<div ng-app="demo">
  My app
  <div ng-view></div>
<script id="welcome_page" type="text/ng-template">
<div ng-controller="Controller1">
Welcome<br>
To go to private page, click <button ng-click="go()">me</button>
</div>  

</script>
<script id="hello_page" type="text/ng-template">
<div ng-controller="Controller2">
Hello {{guid}}, <button ng-click="exit()">exit</button>
</div>    
</script>
</div>

Answer 2

您可以加密 URL 参数。然后在 PHP 中读取 POST/GET 参数时，首先对其进行解密，然后读取值。这样什么都不会暴露。我已经为我自己的一些项目完成了它，并且它有效。

在 URL 中隐藏参数值 (guid)

Hide param value (guid) in an URL

javascript

angularjs

angular-routing