如何在graphql nodejs中使用jwt

npm install jsonwebtoken express-jwt

const jwtSecret = require('crypto').randomBytes(64).toString('hex');
console.log(jwtSecret);

const jwt = require('jsonwebtoken');
const expressJwt = require('express-jwt');

const JWT_SECRET = 'your-jwt-secret'; // 替换为你的JWT密钥

const authMiddleware = expressJwt({
  secret: JWT_SECRET,
  algorithms: ['HS256'],
  credentialsRequired: false // 如果不需要验证所有请求，可以将其设置为false
});

const getUserFromToken = (req) => {
  const token = req.headers.authorization?.split(' ')[1];
  if (token) {
    try {
      return jwt.verify(token, JWT_SECRET);
    } catch (error) {
      // 验证失败，返回null或者抛出错误
      return null;
    }
  }
  return null;
};

module.exports = { authMiddleware, getUserFromToken };

const { authMiddleware, getUserFromToken } = require('./auth');

const resolvers = {
  Query: {
    // 需要身份验证的查询
    protectedQuery: (parent, args, context) => {
      const user = getUserFromToken(context.req);
      if (!user) {
        throw new Error('未经授权的访问');
      }
      // 在这里处理受保护的查询逻辑
    },
    // 不需要身份验证的查询
    publicQuery: (parent, args, context) => {
      // 在这里处理公共查询逻辑
    }
  },
  Mutation: {
    // 需要身份验证的突变
    protectedMutation: (parent, args, context) => {
      const user = getUserFromToken(context.req);
      if (!user) {
        throw new Error('未经授权的访问');
      }
      // 在这里处理受保护的突变逻辑
    },
    // 不需要身份验证的突变
    publicMutation: (parent, args, context) => {
      // 在这里处理公共突变逻辑
    }
  }
};

module.exports = resolvers;

const express = require('express');
const { ApolloServer } = require('apollo-server-express');
const typeDefs = require('./schema');
const resolvers = require('./resolvers');
const { authMiddleware } = require('./auth');

const app = express();

const server = new ApolloServer({
  typeDefs,
  resolvers,
  context: ({ req }) => ({ req })
});

app.use(authMiddleware);

server.applyMiddleware({ app });

app.listen({ port: 4000 }, () =>
  console.log(`服务器已启动，访问地址：http://localhost:4000${server.graphqlPath}`)
);