req.headers['authorization'] 在 Nodejs JWT（JSON WEB TOKEN）中未定义

Question

JWT 的代码如下：

const express = require("express");
const jwt = require("jsonwebtoken");

const app = express();

app.use(express.json());

const user = [
  {
    name: "Rohan",
    id: 1,
  },
  {
    name: "Sophie",
    id: 2,
  },
  {
    name: "Charlie",
    id: 3,
  },
];
app.get("/", (req, res) => {
  res.send("Welcome to Homepage");
});
app.get("/id", verifyToken, (req, res) => {
  res.json(user.filter((id) => user.name === req.user.name));
});

function verifyToken(req, res, next) {
  const authHeader = req.headers['authorization'];
  const token = authHeader && authHeader.split(" ")[1];

  if (token == null) return res.sendStatus(401);

  jwt.verify(token, "secretKey", (err, user) => {
    if (err) return res.sendStatus(403);
    req.user = user;
    next();
  });
}
app.post("/login", (req, res) => {
  const username = req.body.username;
  const user = { name: username };
  jwt.sign(user, "secretKey", (err, token) => {
    res.json({ token: token });
  });
});
app.listen(4000, () => {
  console.log("Server is listening on port: 4000");
});

console.log(The req.headers['authorization']) 时 req.headers['authorization'] 返回 undefined

当请求以 Authorization: Bearer "token" 格式发送时，此 JWT 代码总是返回状态 401（未授权），

请帮忙！！

Answer 1

您使用 Postman 进行测试吗？

在邮递员的标题部分添加“授权”键，如图：

并且不需要'authHeader.split(" ")1;' ，请像这样更改您的代码：

const token = req.headers["authorization"];
//   const token = authHeader && authHeader.split(" ")[1];
console.log(token)