'授权：承载未定义'

Question

当我尝试登录时，授权标头始终未定义。尝试在我的 angular.json 文件中设置 AOT = false 但无济于事。这里有什么问题？

身份验证拦截器

import { HttpHandler, HttpInterceptor, HttpRequest } from "@angular/common/http";
import { Injectable } from "@angular/core";
import { AuthService } from "./auth.service";


@Injectable()
export class AuthInterceptor implements HttpInterceptor{
    constructor(private authService: AuthService){}

    intercept(req: HttpRequest<any>, next: HttpHandler){
        const authToken = this.authService.getToken();
        const authRequest = req.clone({
            headers: req.headers.set("Authorization", "Bearer " + authToken)
        })
        return next.handle(authRequest)
    }   
}

后端的 checkAuth 中间件

const jwt = require('jsonwebtoken');

module.exports = (req, res, next) => {
    try{
        const token = req.headers.authorization.split(" ")[1]
        jwt.verify(token, "asderfghtyu")
        next();
    }
    catch(error) {
        res.status(401).json({
            message: "Authorization failed macha"
        })
    }
}

auth-service.ts

 export class AuthService {
  private token: string;

  constructor(private http: HttpClient) { }

  getToken(){
    return this.token;
  }
  
  createUser(FullName: string, email: string, role: string, password: string) {
    const authData: AuthData = { FullName: FullName, email: email, role: role, password: password }
    this.http.post("http://localhost:3300/api/user/signup", authData)
      .subscribe(result => {
        console.log(result);
      })
  }

  login(email: string, password: string){
    this.http.post<{token: string}>("http://localhost:3300/api/user/login", {email: email, password: password})
    .subscribe(response=>{
      const token = response.token;
      this.token = token;
    })
  }

 

这是存在getToken() 函数的auth-service.ts 文件

Answer 1

在您的 Auth-Interceptor 中，替换 -

const authRequest = req.clone({
        headers: req.headers.set("Authorization", "Bearer " + authToken)
    })

与 -

const authRequest = !authToken ? req : req.clone({
        setHeaders: { Authorization: `Bearer ${authToken}` }
    });

仅当您有令牌时，这才会添加 Authorization 标头。如果authService.getToken() 返回undefined，则不会在请求中添加Authorization 标头。