feat: 完成用户登录界面，api还需完善

server/middleware/auth.ts

@@ -5,21 +5,29 @@ import getKey from "../utils/getKey"
 
 const pathNeedAuth = serverConfig.auth.api
 
-export default defineEventHandler((event) => {
-    const key = getKey()
+export default defineEventHandler(async (event) => {
     const path = getRequestURL(event).pathname
+    // console.log(path)
     if (pathNeedAuth.has(path)) {
-        const authHeader = event.node.req.headers.authorization
+        const key = getKey()
+        // @ts-ignore
+        const authHeader = event.headers.get('authorization');
+        // console.log(authHeader)
         if (!authHeader || !authHeader.startsWith('Bearer ')) {
             throw createError({ statusCode: 401, statusMessage: 'Unauthorized' })
         }
         const token = authHeader.split('Bearer ')[1].trim()
         try {
-            const decoded = jwt.verify(token, key)
+            const decoded = jwt.verify(token, key) as { userId: number, password: string, username: string, exp: number }
+            if (decoded.exp > Date.now()) {
+                // console.log('token expired')
+                throw createError({ statusCode: 401, statusMessage: 'Token invalid or expired', data: { err: 'token expired', token } })
+            }
+            // console.log(decoded)
             // 将用户ID挂载到事件对象，供后续使用
             // event.context.userId = decoded.userId
         } catch (err) {
-            throw createError({ statusCode: 401, statusMessage: 'Token invalid or expired' })
+            throw createError({ statusCode: 401, statusMessage: 'Token invalid or expired', data: { err, token } })
         }
     }
 })