11.11小程序安全购买

// 使用HTTPS确保数据传输安全
const apiUrl = 'https://secure.example.com/api';

// 用户登录时的身份验证
async function login(username, password) {
    const response = await fetch(apiUrl + '/login', {
        method: 'POST',
        headers: {
            'Content-Type': 'application/json'
        },
        body: JSON.stringify({ username, password })
    });
    const data = await response.json();
    if (data.success) {
        localStorage.setItem('token', data.token);
    } else {
        alert('登录失败，请检查用户名和密码');
    }
}

// 支付过程中的数据加密
function encryptData(data) {
    const key = 'your-secret-key'; // 应使用更安全的密钥管理方式
    const encrypted = CryptoJS.AES.encrypt(JSON.stringify(data), key).toString();
    return encrypted;
}

from flask import Flask, request, jsonify
from flask_sqlalchemy import SQLAlchemy
from werkzeug.security import generate_password_hash, check_password_hash

app = Flask(__name__)
app.config['SQLALCHEMY_DATABASE_URI'] = 'sqlite:///database.db'
db = SQLAlchemy(app)

class User(db.Model):
    id = db.Column(db.Integer, primary_key=True)
    username = db.Column(db.String(80), unique=True, nullable=False)
    password_hash = db.Column(db.String(120), nullable=False)

    def set_password(self, password):
        self.password_hash = generate_password_hash(password)

    def check_password(self, password):
        return check_password_hash(self.password_hash, password)

@app.route('/login', methods=['POST'])
def login():
    data = request.get_json()
    user = User.query.filter_by(username=data['username']).first()
    if user and user.check_password(data['password']):
        return jsonify({'success': True, 'token': 'your-token'})
    else:
        return jsonify({'success': False}), 401

if __name__ == '__main__':
    app.run(ssl_context='adhoc')  # 使用临时SSL证书启用HTTPS