This file contains ambiguous Unicode characters that may be confused with others in your current locale. If your use case is intentional and legitimate, you can safely ignore this warning. Use the Escape button to highlight these characters.
// middleware/auth.js
const jwt = require('jsonwebtoken');
module.exports = function(req, res, next) {
// 1. 从请求头中获取token
const token = req.header('x-auth-token');
// 2. 检查token是否存在
if (!token) {
return res.status(401).json({ msg: 'No token, authorization denied' }); // 401: 未授权
}
// 3. 验证token
try {
const decoded = jwt.verify(token, process.env.JWT_SECRET);
// 将解码后的用户信息（特别是user.id）附加到请求对象上
req.user = decoded.user;
// 调用next()，将控制权交给下一个中间件或路由处理器
next();
} catch (err) {
res.status(401).json({ msg: 'Token is not valid' });
};
