38 lines
982 B
JavaScript
38 lines
982 B
JavaScript
|
const express = require('express');
|
|||
|
|
const jwt = require('jsonwebtoken');
|
|||
|
|
const { expressjwt: jwtMiddleware } = require('express-jwt'); // 导入 express-jwt 中间件
|
|||
|
|
const app = express();
|
|||
|
|
const secret = 'nicetechsg';
|
|||
|
|
|
|||
|
|
// 中间件：保护所有 /api 路由
|
|||
|
|
app.use(
|
|||
|
|
'/api',
|
|||
|
|
jwtMiddleware({ secret, algorithms: ['HS512'] })
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
app.get("/test", (req, res) =>{
|
|||
|
|
res.json({message: "test"})
|
|||
|
|
})
|
|||
|
|
|
|||
|
|
// 登录接口（生成 token）
|
|||
|
|
app.post('/login', (req, res) => {
|
|||
|
|
const user = { password: 1, username: 'alice' };
|
|||
|
|
const token = jwt.sign(user, secret, { expiresIn: '1h' });
|
|||
|
|
res.json({ token });
|
|||
|
|
});
|
|||
|
|
|
|||
|
|
// 受保护接口
|
|||
|
|
app.get('/api/protected', (req, res) => {
|
|||
|
|
res.json({ message: 'You have access!', user: req.auth });
|
|||
|
|
});
|
|||
|
|
|
|||
|
|
// 错误处理
|
|||
|
|
app.use((err, req, res, next) => {
|
|||
|
|
if (err.name === 'UnauthorizedError') {
|
|||
|
|
return res.status(401).json({ message: 'Invalid token' });
|
|||
|
|
}
|
|||
|
|
next(err);
|
|||
|
|
});
|
|||
|
|
|
|||
|
|
app.listen(3000, () => console.log('Server started on port 3000'));
|