如何获取属于特定用户的项目

const express = require('express');
const app = express();
const bodyParser = require('body-parser');
const jwt = require('jsonwebtoken');

app.use(bodyParser.json());

// 模拟用户数据库
const users = [
  { id: 1, username: 'user1', password: 'password1', role: 'admin' },
  { id: 2, username: 'user2', password: 'password2', role: 'member' }
];

// 模拟项目数据库
const projects = [
  { id: 1, name: 'Project A', userId: 1 },
  { id: 2, name: 'Project B', userId: 1 },
  { id: 3, name: 'Project C', userId: 2 }
];

// 身份验证中间件
const authenticate = (req, res, next) => {
  const token = req.headers['authorization'];
  if (!token) return res.status(401).send('Access Denied');

  try {
    const verified = jwt.verify(token, 'YOUR_SECRET_KEY');
    req.user = verified;
    next();
  } catch (error) {
    res.status(400).send('Invalid Token');
  }
};

// 获取特定用户的项目
app.get('/projects/:userId', authenticate, (req, res) => {
  const userId = parseInt(req.params.userId);
  const userRole = req.user.role;

  if (userRole !== 'admin' && req.user.id !== userId) {
    return res.status(403).send('Access Denied');
  }

  const userProjects = projects.filter(project => project.userId === userId);
  res.json(userProjects);
});

app.listen(3000, () => console.log('Server is running on port 3000'));