mars
1ba859196a
- 修复DashboardLayout中的退出登录函数，确保清除所有认证信息 - 恢复_app.tsx中的认证逻辑，确保仪表盘页面需要登录访问 - 完善退出登录流程：清除本地存储 -> 调用登出API -> 重定向到登录页面 - 添加错误边界组件提升用户体验 - 优化React水合错误处理 - 添加JWT令牌验证API - 完善各个仪表盘页面的功能和样式
71 lines
1.7 KiB
TypeScript
71 lines
1.7 KiB
TypeScript
import { NextApiRequest, NextApiResponse } from 'next';
|
|
import jwt from 'jsonwebtoken';
|
|
|
|
interface JWTPayload {
|
|
userId: string;
|
|
email: string;
|
|
userType: string;
|
|
name: string;
|
|
iat?: number;
|
|
exp?: number;
|
|
}
|
|
|
|
export default async function handler(
|
|
req: NextApiRequest,
|
|
res: NextApiResponse
|
|
) {
|
|
if (req.method !== 'POST') {
|
|
return res.status(405).json({ success: false, error: '方法不允许' });
|
|
}
|
|
|
|
try {
|
|
const authHeader = req.headers.authorization;
|
|
|
|
if (!authHeader || !authHeader.startsWith('Bearer ')) {
|
|
return res.status(401).json({
|
|
success: false,
|
|
error: '缺少授权令牌'
|
|
});
|
|
}
|
|
|
|
const token = authHeader.substring(7); // 移除 "Bearer " 前缀
|
|
const jwtSecret = process.env.JWT_SECRET || 'your-secret-key';
|
|
|
|
try {
|
|
// 验证并解码 JWT 令牌
|
|
const decoded = jwt.verify(token, jwtSecret) as JWTPayload;
|
|
|
|
// 构造用户对象
|
|
const user = {
|
|
id: decoded.userId,
|
|
email: decoded.email,
|
|
name: decoded.name,
|
|
userType: decoded.userType,
|
|
phone: '13800138000', // 从硬编码数据中获取
|
|
avatarUrl: null
|
|
};
|
|
|
|
res.status(200).json({
|
|
success: true,
|
|
user,
|
|
valid: true
|
|
});
|
|
|
|
} catch (jwtError) {
|
|
// JWT 令牌无效或过期
|
|
console.log('JWT验证失败:', jwtError);
|
|
return res.status(401).json({
|
|
success: false,
|
|
error: '令牌无效或已过期',
|
|
valid: false
|
|
});
|
|
}
|
|
|
|
} catch (error) {
|
|
console.error('令牌验证错误:', error);
|
|
res.status(500).json({
|
|
success: false,
|
|
error: '服务器内部错误'
|
|
});
|
|
}
|
|
}
|