我编写授权代码。单击登录按钮后,我创建一个新标题
res.header('Authorization', token)
Run Code Online (Sandbox Code Playgroud)
管理员登录路由器:
router.post('/admin_login', async (req, res) => {
const adminDB = data.admins;
const admin = adminDB.find(admin => req.body.email === admin.email)
if (!admin) return res.status(400).send('Email in not found!')
if (admin.password !== req.body.password) return res.status(400).send('Invalid password')
const token = jwt.sign({ admin }, 'the_secret_key')
res.header('Authorization', token)
res.redirect('/admin')
})
Run Code Online (Sandbox Code Playgroud)
在管理路由器中登录后,我不会收到授权标头,但我不会收到它。我在中看到授权标头
验证码:
const jwt = require('jsonwebtoken')
module.exports = (req, res, next) => {
const token = req.header('Authorization')
console.log(token)
if (!token) return res.status(401).send('Access Denied')
try {
const verified = jwt.verify(token, 'the_secret_key')
req.admin = verified …Run Code Online (Sandbox Code Playgroud)