如何优雅地捕获节点和快递中的 jsonwebtoken 错误？

Question

Here is my verification function:

exports.validateToken = function(req, res, next){
  var token = req.body.token;
  jwt.verify(token, config.sessionSecret, function(err, decoded) {
     if(err){
         return next(err);
     }else{

        var userToken = jwt.sign(req.body.user, config.secret,{
            expiresIn:10000
        });

        res.json({token: userToken})

    }    
  });
}

I'm expecting an error definition but I'm getting an internal server error on top of that:

TokenExpiredError: jwt expired
at Object.JWT.verify (/Users/Developer/node_modules/jsonwebtoken/index.js:209:19)
at exports.validateToken (/Users/Developer/app/controllers/user.signing.controller.js:369:9)
at Layer.handle [as handle_request] (/Users/Developer/node_modules/express/lib/router/layer.js:76:5)
at next (/Users/Developer/node_modules/express/lib/router/route.js:100:13)
at Route.dispatch (/Users/Developer/node_modules/express/lib/router/route.js:81:3)
at Layer.handle [as handle_request] (/Users/Developer/node_modules/express/lib/router/layer.js:76:5)

What am I doing wrong here?

Answer 1

const jwt = require('jsonwebtoken')

module.exports =  function auth (req,res,next) {
    const token =req.header('x-auth-token')
    if (!token){
        return res.status(401).send('to\'ken not found')
    }
 try{
        const decoded = jwt.decode(token,'m@hf1y')
         req.user = decoded
         next()

 }catch (e) {
     
     return  res.status(400).send('invalid token')
 }
}

Edit

Warning: This is using jwt.decode and not jwt.verify . Since JSON Web Token can always be decoded without knowing the secret key, the previous code is only valid if it comes from a thrusted source.

Answer 2

for some reason the next response is not working. So I replaced that with the following code and everything is fine:

res.status(401).send({error:'invalid token'});

Answer 3

I have tried this in my code. The res.locals.data helps to carry data to the calling function.

Just get the data in the calling function as res.locals.data and your problem is solved hopefully.

if (err) {
    res.locals.data = {
        err: err.name,
        message : err.message
    }
    return next();
}