const express = require('express')
const app = express()
const jwt = require("jsonwebtoken") // 導(dǎo)入jwt
const {expressjwt} = require("express-jwt") //從express-jwt中解構(gòu)
const port = 3000
const secretKEY = "lam12138" //密鑰
app.use(expressjwt({ secret:secretKEY, algorithms: ["HS256"] }).unless({path: ["/api/login"] })) //使用express-jwt這個(gè)中間件 排除路徑為api/login
app.post("/api/login",(req,res)=>{
    // 獲得token
   const token = jwt.sign({username :"lam"},secretKEY,{expiresIn:"60s"})
    res.send({
        status:200,
        msg:"success",
        token
    })
})
app.get(
    "/protected",
    function (req, res) {
    // 即可在非排除路徑下獲得解密后的用戶(hù)信息 通過(guò)req.auth 獲取。相當(dāng)于 express—jwt 6.X版本下的req.user
    console.log(req.auth)
    res.send("+-+")
    }
  );
//   捕獲錯(cuò)誤的路由需要放在所有路由的后面
  app.use((err, req, res, next)=> {
      if(err.name == "UnauthorizedError"){
        res.status(401).send("無(wú)效的token...");
      }else {
        next(err);
      }
  });
app.listen(port, () => console.log(`Example app listening on port http://127.0.0.1:${port}!`))

const expJWT = require("express-jwt");

const {expressjwt:jwt} = require("express-jwt");
const keys=require("./config/index")
app.use(jwt({ secret: keys.secretKey, algorithms: ['HS256'] }).unless({ path: [/^\/login\//] }));