权限验证JWT

{
    "alg": "HS256",
    "type": "JWT"
}

{
    "sub": "123456",
    "name": "John",
    "admin": true
}

// 生成token
const jwt = require('jsonwebtoken')
const token = jwt.sign({
    data: res
}, 'shortVideo', { expiresIn: 30 })


// 验证token
const token = ctx.request.headers.authorization.split(' ')[1]
const payload = jwt.verify(token, 'shortVideo')
ctx.body = payload

const service = axios.create({
    baseURL: config.baseApi,
    timeout: 8000
})

service.interceptors.request.use((req) => {
    const headers = req.headers;
    const { token } = storage.getItem('userInfo');
    if(!headers.Authorization) headers.Authorization = 'Bear ' + token;
    return req;
})