护照JWT“未授权”节点

Question

我正在用令牌授权，当我跟邮递员测试，我不断收到“未授权”登录后，进入个人资料

登录代码：

router.post('/authentication', (request, response, next) => { 
    const email = request.body.email; 
    const password = request.body.password; 

    userModel.getUserByEmail(email, (err, user) => { 
     if (err) throw err; 
     else { 
      if (!user) { 
       console.log('User does not exists!'); 
       response.json({ success: false, msg: 'User does not exists!' }); 
      } else { 
       userModel.comparePassword(password, user.password, (err, isMatch) => { 
        if (err) throw err; 
        else { 
         if (!isMatch) { 
          response.json({ success: false, msg: 'Password do not match!' }); 
         } else { 
          const token = jwt.sign(user, config.secret, { 
           expiresIn: 86400 // 1 day 
          }); 

          response.json({ 
           success: true, 
           token: "JWT " + token, 
           user: { 
            id: user._id, 
            name: user.name, 
            email: user.email, 
            role: user.role 
           } 
          }); 
         } 
        } 
       }); 
      } 
     } 
    }); 
}); 

passport.js

const JwtStrategy = require('passport-jwt').Strategy; 
const ExtractJwt = require('passport-jwt').ExtractJwt; 

const userModel = require('../models/usersModel'); 
const config = require('../config/database'); 

module.exports = function (passport) { 
    let opts = {}; 
    opts.jwtFromRequest = ExtractJwt.fromAuthHeader(); 
    opts.secretOrKey = config.secret; 

    passport.use(new JwtStrategy(opts, (jwt_payload, done) => { 

     userModel.getUserById(jwt_payload._doc._id, (err, user) => { 
      console.log(jwt_payload); 
      if (err) { 
       return done(err, false); 
      } 
      if (user) { 
       return done(null, user); 
      } else { 
       return done(null, false); 
      } 
     }); 
    })); 
} 

测试路线：

router.get('/profile', passport.authenticate('jwt', { session: false }), (request, response, next) => { 
    response.json({ user: request.user }); 
}); 

（PS：我试过console.log（jwt_payload）;并没有在控制台中显示。仍然在此请帮助。我是首发。 ）

Answer 1

当你得到你的jwt令牌后，你应该在每个请求中发送它。

header：authorization：JWT“token”

你在做吗？