如何在Node/Express中使用CAC对用户进行身份验证

const fs = require('fs');
const https = require('https');
const express = require('express');

// 加载CAC证书和私钥
const caCert = fs.readFileSync('path/to/cacert.pem');
const privateKey = fs.readFileSync('path/to/privatekey.pem');
const certificate = fs.readFileSync('path/to/certificate.pem');

const app = express();

// 配置HTTPS服务器
const server = https.createServer(
  {
    key: privateKey,
    cert: certificate,
    ca: caCert,
    requestCert: true,
    rejectUnauthorized: true
  },
  app
);

// 身份验证中间件
const authenticate = (req, res, next) => {
  if (req.client.authorized) {
    // 客户端提供了有效的CAC证书
    next();
  } else {
    // 客户端未提供有效的CAC证书
    res.status(401).send('Unauthorized');
  }
};

// 路由处理程序
app.get('/', authenticate, (req, res) => {
  res.send('Authenticated');
});

// 启动服务器
server.listen(3000, () => {
  console.log('Server started on port 3000');
});