如何在strapi (无头cms)中验证auth0 JWT？

AUTH0_CLIENT_ID=YOUR_AUTH0_CLIENT_ID
AUTH0_CLIENT_SECRET=YOUR_AUTH0_CLIENT_SECRET
AUTH0_AUDIENCE=YOUR_AUTH0_API_IDENTIFIER

module.exports = ({ env }) => ({
  // ...
  jwt: {
    secret: env('JWT_SECRET', 'YOUR_SECRET'),
    // ...
  },
  // ...
});

module.exports = {
  // ...
  settings: {
    // ...
    jwt: {
      enabled: true,
      secret: env('JWT_SECRET', 'YOUR_SECRET'),
      // ...
    },
    // ...
  },
  // ...
};

{
  "routes": [
    // ...
    {
      "method": "POST",
      "path": "/auth/local",
      "handler": "auth.callback",
      "config": {
        "policies": [],
        "auth": null
      }
    },
    {
      "method": "POST",
      "path": "/auth/local/register",
      "handler": "auth.callback",
      "config": {
        "policies": [],
        "auth": null
      }
    },
    {
      "method": "POST",
      "path": "/auth/local/reset-password",
      "handler": "auth.callback",
      "config": {
        "policies": [],
        "auth": null
      }
    },
    {
      "method": "GET",
      "path": "/auth/auth0",
      "handler": "auth.auth0",
      "config": {
        "policies": [],
        "auth": null
      }
    },
    {
      "method": "GET",
      "path": "/auth/auth0/callback",
      "handler": "auth.auth0-callback",
      "config": {
        "policies": [],
        "auth": null
      }
    },
    // ...
  ]
}

module.exports = async () => {
  // ...
  strapi.plugins['users-permissions'].controllers.auth.callback = async (ctx) => {
    // 获取Auth0 JWT并进行验证
    const { jwt } = ctx.request.body;
    const verifiedToken = await strapi.plugins['users-permissions'].services.jwt.verify(jwt);

    // 根据需要进行处理，例如获取用户信息等

    // 返回处理结果
    ctx.send({ success: true });
  };
  // ...
};