ajax 401

$.ajax({
    url: 'your-api-endpoint',
    type: 'GET',
    beforeSend: function(xhr) {
        xhr.setRequestHeader('Authorization', 'Bearer ' + yourToken);
    },
    success: function(data) {
        console.log('Success:', data);
    },
    error: function(xhr, status, error) {
        if (xhr.status === 401) {
            // Handle unauthorized access
            console.log('Unauthorized, redirecting to login...');
            window.location.href = '/login';
        } else {
            console.error('Error:', error);
        }
    }
});

const express = require('express');
const app = express();

app.use((req, res, next) => {
    const token = req.headers['authorization'];
    if (!token) return res.status(401).send('Access denied.');

    try {
        const verified = jwt.verify(token, 'your-secret-key');
        req.user = verified;
        next();
    } catch (error) {
        res.status(400).send('Invalid token.');
    }
});

app.get('/protected', (req, res) => {
    res.send('This is a protected route.');
});

app.listen(3000, () => console.log('Server running on port 3000'));