29 lines
677 B
JavaScript
29 lines
677 B
JavaScript
import jwt from 'jsonwebtoken';
|
|
|
|
const SECRET = 'life-circle-secret-key-2026';
|
|
|
|
export function auth(req, res, next) {
|
|
const header = req.headers.authorization;
|
|
if (!header) {
|
|
return res.status(401).json({ message: '未登录' });
|
|
}
|
|
const token = header.split(' ')[1];
|
|
try {
|
|
const payload = jwt.verify(token, SECRET);
|
|
req.user = payload;
|
|
next();
|
|
} catch (e) {
|
|
return res.status(401).json({ message: '登录已过期，请重新登录' });
|
|
}
|
|
}
|
|
|
|
export function sign(user) {
|
|
return jwt.sign(
|
|
{ id: user.id, username: user.username, nickname: user.nickname, role: user.role },
|
|
SECRET,
|
|
{ expiresIn: '7d' }
|
|
);
|
|
}
|
|
|
|
export { SECRET };
|