401 未授权 linux

curl -u username:password http://example.com/protected

const express = require('express');
const app = express();

app.use((req, res, next) => {
  const authHeader = req.headers.authorization;
  if (!authHeader) {
    return res.status(401).send('Access denied. No token provided.');
  }

  const [type, credentials] = authHeader.split(' ');
  if (type.toLowerCase() !== 'basic') {
    return res.status(401).send('Access denied. Invalid token type.');
  }

  const decoded = Buffer.from(credentials, 'base64').toString();
  const [username, password] = decoded.split(':');

  if (username === 'admin' && password === 'secret') {
    next(); // 正确的凭据，继续处理请求
  } else {
    res.status(401).send('Access denied. Incorrect credentials.');
  }
});

app.get('/protected', (req, res) => {
  res.send('Welcome to the protected area!');
});

app.listen(3000, () => console.log('Server running on port 3000'));