如何在NodeJS中使用JWT令牌验证路由

npm install jsonwebtoken express

const jwt = require('jsonwebtoken');
const express = require('express');
const app = express();

// 密钥，用于签名和验证JWT
const SECRET_KEY = 'your-secret-key';

// JWT验证中间件
function authenticateToken(req, res, next) {
  const authHeader = req.headers['authorization'];
  const token = authHeader && authHeader.split(' ')[1];

  if (token == null) return res.sendStatus(401);

  jwt.verify(token, SECRET_KEY, (err, user) => {
    if (err) return res.sendStatus(403);
    req.user = user;
    next();
  });
}

// 示例路由
app.get('/protected', authenticateToken, (req, res) => {
  res.send(`Hello, ${req.user.username}! This is a protected route.`);
});

// 启动服务器
app.listen(3000, () => {
  console.log('Server is running on port 3000');
});

const token = jwt.sign({ username: 'exampleUser' }, SECRET_KEY, { expiresIn: '1h' });
console.log(token);