从 MongoDB 后端获取数据时获取 [jwt 未定义] -

Question

这个问题不言自明。我是 registering/signing 数据库中的 mongo up 用户。他们注册得很好，并且还生成了 accesstoken [jwt based]。现在，当我去查询数据库以获取用户列表时，我得到了那个错误 - jwt 未定义。

值得一提的是，我后端的用户也可以拥有两种类型的角色 - 基本角色和管理员角色。只有管理员用户才能通过在 header 中发送 accessToken 作为 Bearer 授权参数来获取所有用户的列表。

我的后端项目结构中有 2 个主要文件，它们使用 jwt.access 方法，例如 jwt.verify 或 jwt.signIn ;这些是 server.js 和 userController.js [一个单独的文件，我在其中编写了所有与数据库相关的方法]。

就我而言，所有必需的包都在我的项目中 - express、node、jwa、jws、jsonwebtoken、mongo、mongoose、bcrypt、cors 等。所以有什么问题吗？

我的route.js -->

const User = require('../models/user.model');
const jwt = require('jsonwebtoken');
const bcrypt = require('bcrypt');

const { roles } = require('../models/roles');


const JWT_SECRET = "$#GR24T4344$#$@#%ETWWTEME%";

async function hashPassword(password) {
    return await bcrypt.hash(password, 10);
}


async function validatePassword(plainPassword, hashedPassword) {
    return await bcrypt.compare(plainPassword, hashedPassword);
}


exports.grantAccess = function (action, resource) {
    return async (req, res, next) => {
        try {
            const permission = roles.can(req.user.role)[action](resource);
            if (!permission.granted) {
                return res.status(401).json({
                    error: "You don't have enough permission to perform this action"
                });
            }
            next();
        } catch (error) {
            next(error);
        }
    }
}


exports.allowIfLoggedin = async (req, res, next) => {
    try {
        const user = res.locals.loggedInUser;
        if (!user)
            return res.status(401).json({
                error: "You need to be logged in to access this route"
            });
        req.user = user;
        next();
    } catch (error) {
        next(error);
    }
}


exports.signup = async (req, res, next) => {
    try {
        const { role, email, password } = req.body;
        const hashedPassword = await hashPassword(password);
        const newUser = new User({ email, password: hashedPassword, role: role || "basic" });
        const accessToken = jwt.sign({ userId: newUser._id }, JWT_SECRET, {
            expiresIn: "1d"
        });
        newUser.accessToken = accessToken;
        await newUser.save();
        res.json({
            data: newUser,
            message: "You have signed up successfully"
        });
    } catch (error) {
        next(error);
    }
}


exports.login = async (req, res, next) => {
    try {
        const { email, password } = req.body;
        const user = await User.findOne({ email });
        if (!user)
            return next(new Error('Email does not exist'));
        const validPassword = await validatePassword(password, user.password);
        if (!validPassword)
            return next(new Error('Password is not correct'));
        const accessToken = jwt.sign({ userId: user._id }, JWT_SECRET, {
            expiresIn: "1d"
        });
        await User.findByIdAndUpdate(user._id, { accessToken });
        res.status(200).json({
            data: { email: user.email, role: user.role },
            accessToken
        });
    } catch (error) {
        next(error);
    }
}


exports.getUsers = async (req, res, next) => {
    const users = await User.find({});
    res.status(200).json({
        data: users
    });
}


exports.getUser = async (req, res, next) => {
    try {
        const userId = req.params.userId;
        const user = await User.findById(userId);
        if (!user)
            return next(new Error('User does not exist'));
        res.status(200).json({
            data: user
        });
    } catch (error) {
        next(error);
    }
}


exports.updateUser = async (req, res, next) => {
    try {
        const { role } = req.body;
        const userId = req.params.userId;
        await User.findByIdAndUpdate(userId, { role });
        const user = await User.findById(userId);
        res.status(200).json({
            data: user
        });
    } catch (error) {
        next(error);
    }
}


exports.deleteUser = async (req, res, next) => {
    try {
        const userId = req.params.userId;
        await User.findByIdAndDelete(userId);
        res.status(200).json({
            data: null,
            message: 'User has been deleted'
        });
    } catch (error) {
        next(error);
    }
}

我的server.js -->

const express = require('express');
const bodyParser = require('body-parser');
const cors = require('cors');
const PORT = 4000;
const mongoose = require('mongoose');
const Schema = mongoose.Schema;
const playerRoutes = express.Router();
const userRoutes = express.Router();
const userController = require('./controllers/userController');
const user_routes = require('./apiroutes/route');
const app = express();

const JWT_SECRET = "$#GR24T4344$#$@#%ETWWTEME%";


const users = "users";

require("dotenv").config({path: __dirname+ '../.env'});



let Player = require('./models/player.model');
let User = require('./models/user.model');

app.use(cors());
app.use(bodyParser.json());

app.use(
    bodyParser.urlencoded({
        extended: false
    })
);

mongoose.connect('mongodb://127.0.0.1:27017/playerDB', function (err, db) {
    if (err)
        throw err;
    db.createCollection(users, function (err, resp) {
        if (err)
            throw err;
        console.log("Collection created!");

    });
}, { useNewUrlParser: true });


const connection = mongoose.connection;

connection.once('open', function () {
    console.log("MongoDB database connection established successfully");
});

..... blablablaaaa


app.use('/playerDB', playerRoutes);


app.use(async (req, res, next) => {

    res.header("Access-Control-Allow-Origin", "*");

    if (req.headers["x-access-token"]) {
        try {
            const accessToken = req.headers["x-access-token"];
            const { userId, exp } = await jwt.verify(accessToken, JWT_SECRET);
            // If token has expired
            if (exp < Date.now().valueOf() / 1000) {
                return res.status(401).json({
                    error: "JWT token has expired, please login to obtain a new one"
                });
            }
            res.locals.loggedInUser = await User.findById(userId);
            next();
        } catch (error) {
            next(error);
        }
    } else {
        next();
    }


});


app.use('/users', user_routes);


app.listen(PORT, function () {
    console.log("Server is running on Port: " + PORT);
});

希望您了解我的方法和场景？你能猜出它可能哪里出错了吗？任何的想法？缺少 npm 包或更重要的东西？

期待关于这个问题的一些提示！似乎想不出办法！

Answer 1

您似乎忘记将此行添加到 server.js

const jwt = require('jsonwebtoken');

注册和登录时，这没有引起问题，因为对于这些请求，req.headers["x-access-token"] 为空，代码没有到达您所在的 if 块使用了 jwt，但是一个带有这个 header 的请求出现了（比如 getUsers），代码试图使用 jwt.verify，但是由于没有导入 jwt，它给出了错误。

从 MongoDB 后端获取数据时获取 [jwt 未定义] -

Getting [jwt is not defined] while fetching data from MongoDB backend -

mongodb

node.js

express

jwt

mern