How do I implement JWT authorization in a TypeScript application?

How do I implement JWT authorization in a TypeScript application?

To implement JWT authorization in a TypeScript application, you need to follow these steps: 1. Install necessary packages like jsonwebtoken and @types/jsonwebtoken. 2. Create a function to generate a JWT token. 3. Set up middleware to verify the token on protected routes.

Can you show me a code example for generating a JWT token?

Sure! Here's a simple example:

import jwt from 'jsonwebtoken';

const generateToken = (userId: string) => {
    return jwt.sign({ id: userId }, 'your_secret_key', { expiresIn: '1h' });
};

Make sure to replace 'your_secret_key' with a strong secret.

What about verifying the token in middleware?

You can create a middleware function like this:

import { Request, Response, NextFunction } from 'express';
import jwt from 'jsonwebtoken';

const authenticateToken = (req: Request, res: Response, next: NextFunction) => {
    const token = req.headers['authorization']?.split(' ')[1];
    if (!token) return res.sendStatus(401);
    jwt.verify(token, 'your_secret_key', (err, user) => {
        if (err) return res.sendStatus(403);
        req.user = user;
        next();
    });
};

This middleware checks for the token and verifies it.