How do I handle JWT errors in Node.js?

How do I handle JWT errors in Node.js?

To handle JWT errors in Node.js, you can use try-catch blocks around your token verification logic. This allows you to catch errors like 'TokenExpiredError' or 'JsonWebTokenError'.

Can you show me a code example?

Sure! Here's a simple example:

const jwt = require('jsonwebtoken');

function verifyToken(token) {
    try {
        const decoded = jwt.verify(token, 'your-secret-key');
        return decoded;
    } catch (error) {
        if (error.name === 'TokenExpiredError') {
            console.error('Token has expired.');
        } else if (error.name === 'JsonWebTokenError') {
            console.error('Invalid token.');
        }
        return null;
    }
}

What should I do if the token is invalid?

If the token is invalid, you should return an appropriate HTTP response, such as a 401 Unauthorized status, and inform the user that their session has expired or is invalid.