nodejs中的express-jwt的使用解读

const express = require('express')
const app = express()
const jwt = require("jsonwebtoken") // 导入jwt
const {expressjwt} = require("express-jwt") //从express-jwt中解构
const port = 3000
const secretKEY = "lam12138" //密钥
app.use(expressjwt({ secret:secretKEY, algorithms: ["HS256"] }).unless({path: ["/api/login"] })) //使用express-jwt这个中间件 排除路径为api/login
app.post("/api/login",(req,res)=>{
    // 获得token
   const token = jwt.sign({username :"lam"},secretKEY,{expiresIn:"60s"})
    res.send({
        status:200,
        msg:"success",
        token
    })
})
app.get(
    "/protected",
    function (req, res) {
    // 即可在非排除路径下获得解密后的用户信息 通过req.auth 获取。相当于 express—jwt 6.X版本下的req.user
    console.log(req.auth)
    res.send("+-+")
    }
  );
//   捕获错误的路由需要放在所有路由的后面
  app.use((err, req, res, next)=> {
      if(err.name == "UnauthorizedError"){
        res.status(401).send("无效的token...");
      }else {
        next(err);
      }
  });
app.listen(port, () => console.log(`Example app listening on port http://127.0.0.1:${port}!`))

const expJWT = require("express-jwt");

const {expressjwt:jwt} = require("express-jwt");
const keys=require("./config/index")
app.use(jwt({ secret: keys.secretKey, algorithms: ['HS256'] }).unless({ path: [/^\/login\//] }));