隐藏/显示具有动态ID的字段(NodeJS、Mongoose、Express、Javascript)

const mongoose = require('mongoose');

const userSchema = new mongoose.Schema({
  name: String,
  email: String,
  password: String
});

const User = mongoose.model('User', userSchema);

module.exports = User;

const express = require('express');
const router = express.Router();
const User = require('../models/user');

router.get('/users/:id', async (req, res) => {
  try {
    const user = await User.findById(req.params.id);

    // 根据用户角色决定是否显示敏感字段
    if (req.user.role === 'admin') {
      res.json(user);
    } else {
      const { name, email } = user;
      res.json({ name, email });
    }
  } catch (error) {
    res.status(500).json({ error: 'Internal server error' });
  }
});

module.exports = router;