How can I implement JWT roles and permissions in a TypeScript Express app?

How can I implement JWT roles and permissions in a TypeScript Express app?

You can implement JWT roles and permissions by first defining user roles, then creating middleware to check these roles.

What libraries do I need to use for JWT in Express?

You can use libraries like 'jsonwebtoken' for creating and verifying tokens, and 'express-jwt' for middleware.

Can you show me a code example for the middleware?

Sure! Here's a simple middleware example:

import { Request, Response, NextFunction } from 'express';
import jwt from 'jsonwebtoken';

const authorize = (roles: string[]) => {
    return (req: Request, res: Response, next: NextFunction) => {
        const token = req.headers['authorization']?.split(' ')[1];
        if (!token) return res.sendStatus(403);

        jwt.verify(token, 'your_secret_key', (err, user) => {
            if (err) return res.sendStatus(403);
            if (!roles.includes(user.role)) return res.sendStatus(403);
            next();
        });
    };
};

This middleware checks if the user has the required role.

How do I assign roles to users in my database?

You can add a 'role' field in your user model and assign roles when creating or updating user records.