在我找到我自己并最终找到我想要的之后
对有效载荷上的数据进行加密的最佳方式是将其加密到对象中，然后当控制器上接收到数据时，再次对其进行解密
然后最重要的方式，当本地策略在护照只想要电子邮件和密码只..所以操纵再次在请求.身体
在React JS中

const result = {data : encrypt(values)}
axios.post(`${API}/signin`, result) // I simplify the coding

字符串
在控制器nodejs中，

app.post(`${api_path}/signin`, 
            validateBody(schemas.loginEncryptAccSchema),
            requireSignIn, //focus in this function
        (req, res, next) => {
            const { user }    = req;
            const { decrypt } = req.query
                  params      = { user, decrypt };
            return console.log('params', params); // i stopped
            const c_account   = new ControllerAccount(params);
            c_account._postSignin(doc => res.status(200).json(doc))
    });

型
requireSignin函数

const requireSignIn       = (req, res, next) => {
        const data     = req.body.data;
        const bytes    = CryptoJS.AES.decrypt(data, `${KEY_CHAIN}`); //i decrypt
              req.body = JSON.parse(bytes.toString(CryptoJS.enc.Utf8)); //then i assign into req.body again
        passport.authenticate('local', { session : false })(req, res, next);
    }

型
finaaaalyyy xD

您可以使用JWT加密并创建后端可以在express处理请求时理解/解码的算法。

const jwtDetails = {
        secret: 'your secret', 
        key: 'your key'
    };
    jwtEncrypt.generateJWT(
        jwtDetails,
        payload,
        constants.encryption,
    ).then(token => {
        // use your token on you request payload
    });

字符串
在你的请求有效载荷上，它看起来像这样。

data: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJmZDJhMDA0Yy0wMTIzLTRmZDctOGEzMi1mY2MzZGJiMmQ1YjAiLCJkYXRhIjp7InB1YmxpYyI6eyJhY2NvdW50IjoiNDAwNyIsInBhc3N3b3JkIjoiMTIzNDU2IiwiYXBpX2tleSI6IkREZTgwZjg0MWVhN2JjOWU3ODk0NmUwYjlkNmQ5YjdlMjAwZWQ1NDY4YSIsInVzZXJfdHlwZSI6WyJBR0VOVCJdfSwiZW5jRGF0YSI6ImQxYmJhNjJhMzE2NWI2MDRhYTM2YTU3ZGZjNTQ2ZTRmIn0sImlhdCI6MTYxNTczMDQ4NCwiZXhwIjoxNjE1NzczNjg0fQ.xVbWKBYJBvpHeYVMqr96nYkLNqkoiOeWRkZ5GmiOi3w

型

你能做的就是

Instead of doing encryption and then decryption in your frontend side.
You can handle it by your backend 
Simple and secure way is like you just need to pass username and password from 
your front end.
Then check both value are not empty.if you get any field empty then return 
error 402 with error message 
If you get both value then first check your user exist or not if not then 
return error 
If your user exist then an then you need to create token from your server side 
and store this token with your user table/document 
When you successfully store your token in users table/model then return 
response with your success message and your token.
Finally you can use your token in frontend. 
You can store this token in localStorage or as cookie in your frontend 
Then in every request which need to be authenticated you can pass your token 
in header of that request and you can verify your token from backend.
If token is not valid then you can simple throw error message that user is not 
authenticated.
Or you can give permission for sending response as per request

字符串
范例：

//your data and secrete key 
   var ciphertext = CryptoJS.AES.encrypt('my message', 'secret key 123'); in crypto js    
  then you can pass it to your servere like { data : ciphertext } as payload 
  use that secrete key(like : 'secret key 123') to decrypt your reqest data in your backend side

型