NestJS & Passport:在用户密码更改时更改JWT令牌？

// 示例代码
import { Injectable } from '@nestjs/common';
import { JwtService } from '@nestjs/jwt';
import { User } from './user.entity';

@Injectable()
export class AuthService {
  constructor(private jwtService: JwtService) {}

  async login(user: User) {
    const payload = { userId: user.id };
    const accessToken = this.jwtService.sign(payload);
    const refreshToken = this.generateRefreshToken(user.id);
    // 存储 refreshToken 到数据库
    return { accessToken, refreshToken };
  }

  async refreshToken(userId: string) {
    const user = await User.findOne(userId);
    if (!user) {
      throw new Error('User not found');
    }
    const payload = { userId: user.id };
    const accessToken = this.jwtService.sign(payload);
    const refreshToken = this.generateRefreshToken(user.id);
    // 更新数据库中的 refreshToken
    return { accessToken, refreshToken };
  }

  async changePassword(userId: string) {
    // 使当前的 refreshToken 失效
    // 删除或更新数据库中的 refreshToken
  }

  private generateRefreshToken(userId: string) {
    // 生成刷新令牌的逻辑
  }
}

// 示例代码
import { Injectable } from '@nestjs/common';
import { JwtService } from '@nestjs/jwt';
import { User } from './user.entity';

@Injectable()
export class AuthService {
  constructor(private jwtService: JwtService) {}

  async login(user: User) {
    const payload = { userId: user.id };
    const accessToken = this.jwtService.sign(payload);
    // 存储 accessToken 到黑名单（如果需要）
    return { accessToken };
  }

  async changePassword(userId: string) {
    // 将旧的 accessToken 加入黑名单
  }

  async verifyToken(token: string) {
    // 检查 token 是否在黑名单中
    // 如果在黑名单中，抛出异常
  }
}