{"id":16237,"date":"2024-01-22T12:19:20","date_gmt":"2024-01-22T08:49:20","guid":{"rendered":"https:\/\/rasanegar.com\/blog\/%d8%a7%d8%ad%d8%b1%d8%a7%d8%b2-%d9%87%d9%88%db%8c%d8%aa-%d9%88-%d9%85%d8%ac%d9%88%d8%b2-%d8%a8%d8%a7-jwt-%d9%87%d8%a7-%d8%af%d8%b1-express-js-%d8%af%d8%b1-%d8%a7%db%8c%d9%86-%d9%85%d9%82%d8%a7%d9%84\/"},"modified":"2024-01-22T12:19:20","modified_gmt":"2024-01-22T08:49:20","slug":"%d8%a7%d8%ad%d8%b1%d8%a7%d8%b2-%d9%87%d9%88%db%8c%d8%aa-%d9%88-%d9%85%d8%ac%d9%88%d8%b2-%d8%a8%d8%a7-jwt-%d9%87%d8%a7-%d8%af%d8%b1-express-js-%d8%af%d8%b1-%d8%a7%db%8c%d9%86-%d9%85%d9%82%d8%a7%d9%84","status":"publish","type":"post","link":"https:\/\/rasanegaar.com\/blog\/%d8%a7%d8%ad%d8%b1%d8%a7%d8%b2-%d9%87%d9%88%db%8c%d8%aa-%d9%88-%d9%85%d8%ac%d9%88%d8%b2-%d8%a8%d8%a7-jwt-%d9%87%d8%a7-%d8%af%d8%b1-express-js-%d8%af%d8%b1-%d8%a7%db%8c%d9%86-%d9%85%d9%82%d8%a7%d9%84\/","title":{"rendered":"\u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0648 \u0645\u062c\u0648\u0632 \u0628\u0627 JWT \u0647\u0627 \u062f\u0631 Express.js \u062f\u0631 \u0627\u06cc\u0646 \u0645\u0642\u0627\u0644\u0647\u060c \u0645\u0627 \u062f\u0631 \u0645\u0648\u0631\u062f \u0631\u0648\u0634 \u0639\u0645\u0644\u06a9\u0631\u062f JSON Web Tokens\u060c \u0645\u0632\u0627\u06cc\u0627\u06cc \u0622\u0646\u0647\u0627\u060c \u0633\u0627\u062e\u062a\u0627\u0631 \u0622\u0646\u0647\u0627 \u0648 \u0631\u0648\u0634 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0646\u0647\u0627 \u0628\u0631\u0627\u06cc \u0627\u0646\u062c\u0627\u0645 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0648 \u0645\u062c\u0648\u0632 \u0627\u0648\u0644\u06cc\u0647 \u062f\u0631 Express \u0635\u062d\u0628\u062a \u062e\u0648\u0627\u0647\u06cc\u0645 \u06a9\u0631\u062f.  \u0644\u0627\u0632\u0645 \u0646\u06cc\u0633\u062a \u062a\u062c\u0631\u0628\u0647 \u0642\u0628\u0644\u06cc \u0628\u0627 JSON Web Tokens \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u06cc\u062f \u0632\u06cc\u0631\u0627 \u0645\u0627&#8230;"},"content":{"rendered":"<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_85 counter-hierarchy ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\"><p class=\"ez-toc-title\" style=\"cursor:inherit\">\u0633\u0631\u0641\u0635\u0644\u0647\u0627\u06cc \u0645\u0637\u0644\u0628<\/p>\n<\/div><nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/rasanegaar.com\/blog\/%d8%a7%d8%ad%d8%b1%d8%a7%d8%b2-%d9%87%d9%88%db%8c%d8%aa-%d9%88-%d9%85%d8%ac%d9%88%d8%b2-%d8%a8%d8%a7-jwt-%d9%87%d8%a7-%d8%af%d8%b1-express-js-%d8%af%d8%b1-%d8%a7%db%8c%d9%86-%d9%85%d9%82%d8%a7%d9%84\/#%d9%85%d8%b9%d8%b1%d9%81%db%8c\" >\u0645\u0639\u0631\u0641\u06cc<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/rasanegaar.com\/blog\/%d8%a7%d8%ad%d8%b1%d8%a7%d8%b2-%d9%87%d9%88%db%8c%d8%aa-%d9%88-%d9%85%d8%ac%d9%88%d8%b2-%d8%a8%d8%a7-jwt-%d9%87%d8%a7-%d8%af%d8%b1-express-js-%d8%af%d8%b1-%d8%a7%db%8c%d9%86-%d9%85%d9%82%d8%a7%d9%84\/#%d8%aa%d9%88%da%a9%d9%86_%d9%87%d8%a7%db%8c_%d9%88%d8%a8_json_%da%86%db%8c%d8%b3%d8%aa%d8%9f\" >\u062a\u0648\u06a9\u0646 \u0647\u0627\u06cc \u0648\u0628 JSON \u0686\u06cc\u0633\u062a\u061f<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/rasanegaar.com\/blog\/%d8%a7%d8%ad%d8%b1%d8%a7%d8%b2-%d9%87%d9%88%db%8c%d8%aa-%d9%88-%d9%85%d8%ac%d9%88%d8%b2-%d8%a8%d8%a7-jwt-%d9%87%d8%a7-%d8%af%d8%b1-express-js-%d8%af%d8%b1-%d8%a7%db%8c%d9%86-%d9%85%d9%82%d8%a7%d9%84\/#%d8%b3%d8%a7%d8%ae%d8%aa%d8%a7%d8%b1_%db%8c%da%a9_jwt\" >\u0633\u0627\u062e\u062a\u0627\u0631 \u06cc\u06a9 JWT<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/rasanegaar.com\/blog\/%d8%a7%d8%ad%d8%b1%d8%a7%d8%b2-%d9%87%d9%88%db%8c%d8%aa-%d9%88-%d9%85%d8%ac%d9%88%d8%b2-%d8%a8%d8%a7-jwt-%d9%87%d8%a7-%d8%af%d8%b1-express-js-%d8%af%d8%b1-%d8%a7%db%8c%d9%86-%d9%85%d9%82%d8%a7%d9%84\/#%d9%85%d8%b2%db%8c%d8%aa_%d8%a7%d8%b3%d8%aa%d9%81%d8%a7%d8%af%d9%87_%d8%a7%d8%b2_jwt_%d9%86%d8%b3%d8%a8%d8%aa_%d8%a8%d9%87_%d8%b1%d9%88%d8%b4_%d9%87%d8%a7%db%8c_%d8%b3%d9%86%d8%aa%db%8c\" >\u0645\u0632\u06cc\u062a \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 JWT \u0646\u0633\u0628\u062a \u0628\u0647 \u0631\u0648\u0634 \u0647\u0627\u06cc \u0633\u0646\u062a\u06cc<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/rasanegaar.com\/blog\/%d8%a7%d8%ad%d8%b1%d8%a7%d8%b2-%d9%87%d9%88%db%8c%d8%aa-%d9%88-%d9%85%d8%ac%d9%88%d8%b2-%d8%a8%d8%a7-jwt-%d9%87%d8%a7-%d8%af%d8%b1-express-js-%d8%af%d8%b1-%d8%a7%db%8c%d9%86-%d9%85%d9%82%d8%a7%d9%84\/#%d8%a7%d8%b3%d8%aa%d9%81%d8%a7%d8%af%d9%87_%d8%a7%d8%b2_jwt_%d8%a8%d8%a7_express\" >\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 JWT \u0628\u0627 Express<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/rasanegaar.com\/blog\/%d8%a7%d8%ad%d8%b1%d8%a7%d8%b2-%d9%87%d9%88%db%8c%d8%aa-%d9%88-%d9%85%d8%ac%d9%88%d8%b2-%d8%a8%d8%a7-jwt-%d9%87%d8%a7-%d8%af%d8%b1-express-js-%d8%af%d8%b1-%d8%a7%db%8c%d9%86-%d9%85%d9%82%d8%a7%d9%84\/#%d8%b3%d8%b1%d9%88%db%8c%d8%b3_%d8%a7%d8%ad%d8%b1%d8%a7%d8%b2_%d9%87%d9%88%db%8c%d8%aa\" >\u0633\u0631\u0648\u06cc\u0633 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/rasanegaar.com\/blog\/%d8%a7%d8%ad%d8%b1%d8%a7%d8%b2-%d9%87%d9%88%db%8c%d8%aa-%d9%88-%d9%85%d8%ac%d9%88%d8%b2-%d8%a8%d8%a7-jwt-%d9%87%d8%a7-%d8%af%d8%b1-express-js-%d8%af%d8%b1-%d8%a7%db%8c%d9%86-%d9%85%d9%82%d8%a7%d9%84\/#%d8%ae%d8%af%d9%85%d8%a7%d8%aa_%da%a9%d8%aa%d8%a7%d8%a8\" >\u062e\u062f\u0645\u0627\u062a \u06a9\u062a\u0627\u0628<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/rasanegaar.com\/blog\/%d8%a7%d8%ad%d8%b1%d8%a7%d8%b2-%d9%87%d9%88%db%8c%d8%aa-%d9%88-%d9%85%d8%ac%d9%88%d8%b2-%d8%a8%d8%a7-jwt-%d9%87%d8%a7-%d8%af%d8%b1-express-js-%d8%af%d8%b1-%d8%a7%db%8c%d9%86-%d9%85%d9%82%d8%a7%d9%84\/#%d9%86%d9%88%d8%b3%d8%a7%d8%b2%db%8c_%d8%b1%d9%85%d8%b2\" >\u0646\u0648\u0633\u0627\u0632\u06cc \u0631\u0645\u0632<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/rasanegaar.com\/blog\/%d8%a7%d8%ad%d8%b1%d8%a7%d8%b2-%d9%87%d9%88%db%8c%d8%aa-%d9%88-%d9%85%d8%ac%d9%88%d8%b2-%d8%a8%d8%a7-jwt-%d9%87%d8%a7-%d8%af%d8%b1-express-js-%d8%af%d8%b1-%d8%a7%db%8c%d9%86-%d9%85%d9%82%d8%a7%d9%84\/#%d9%86%d8%aa%db%8c%d8%ac%d9%87\" >\u0646\u062a\u06cc\u062c\u0647<\/a><\/li><\/ul><\/nav><\/div>\n<span class=\"span-reading-time rt-reading-time\" style=\"display: block;\"><span class=\"rt-label rt-prefix\">\u0632\u0645\u0627\u0646 \u0644\u0627\u0632\u0645 \u0628\u0631\u0627\u06cc \u0645\u0637\u0627\u0644\u0639\u0647: <\/span> <span class=\"rt-time\"> 10<\/span> <span class=\"rt-label rt-postfix\">\u062f\u0642\u06cc\u0642\u0647<\/span><\/span><p> <br \/>\n<\/p>\n<div class=\"content\"><noscript><\/p>\n<style>.lazyload-placeholder { display: none;  }<\/style>\n<p><\/noscript><\/p>\n<h2 id=\"introduction\"><span class=\"ez-toc-section\" id=\"%d9%85%d8%b9%d8%b1%d9%81%db%8c\"><\/span>\u0645\u0639\u0631\u0641\u06cc<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>\u062f\u0631 \u0627\u06cc\u0646 \u0645\u0642\u0627\u0644\u0647\u060c \u0645\u0627 \u062f\u0631 \u0645\u0648\u0631\u062f \u0631\u0648\u0634 \u0639\u0645\u0644\u06a9\u0631\u062f JSON Web Tokens\u060c \u0645\u0632\u0627\u06cc\u0627\u06cc \u0622\u0646\u0647\u0627\u060c \u0633\u0627\u062e\u062a\u0627\u0631 \u0622\u0646\u0647\u0627 \u0648 \u0631\u0648\u0634 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0646\u0647\u0627 \u0628\u0631\u0627\u06cc \u0627\u0646\u062c\u0627\u0645 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0648 \u0645\u062c\u0648\u0632 \u0627\u0648\u0644\u06cc\u0647 \u062f\u0631 Express \u0635\u062d\u0628\u062a \u062e\u0648\u0627\u0647\u06cc\u0645 \u06a9\u0631\u062f.<\/p>\n<p>\u0644\u0627\u0632\u0645 \u0646\u06cc\u0633\u062a \u062a\u062c\u0631\u0628\u0647 \u0642\u0628\u0644\u06cc \u0628\u0627 JSON Web Tokens \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u06cc\u062f \u0632\u06cc\u0631\u0627 \u0627\u0632 \u0627\u0628\u062a\u062f\u0627 \u062f\u0631 \u0645\u0648\u0631\u062f \u0622\u0646 \u0635\u062d\u0628\u062a \u062e\u0648\u0627\u0647\u06cc\u0645 \u06a9\u0631\u062f.<\/p>\n<p>\u0628\u0631\u0627\u06cc \u0628\u062e\u0634 \u067e\u06cc\u0627\u062f\u0647 \u0633\u0627\u0632\u06cc\u060c \u0627\u06af\u0631 \u062a\u062c\u0631\u0628\u0647 \u0642\u0628\u0644\u06cc \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u06cc\u062f\u060c \u062a\u0631\u062c\u06cc\u062d \u062f\u0627\u062f\u0647 \u0645\u06cc \u0634\u0648\u062f <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/expressjs.com\/\">\u0628\u06cc\u0627\u0646<\/a>\u060c JavaScript ES6 \u0648 REST Clients.<\/p>\n<h2 id=\"whatarejsonwebtokens\"><span class=\"ez-toc-section\" id=\"%d8%aa%d9%88%da%a9%d9%86_%d9%87%d8%a7%db%8c_%d9%88%d8%a8_json_%da%86%db%8c%d8%b3%d8%aa%d8%9f\"><\/span>\u062a\u0648\u06a9\u0646 \u0647\u0627\u06cc \u0648\u0628 JSON \u0686\u06cc\u0633\u062a\u061f<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p><em>JSON Web Tokens<\/em> (JWT) \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u0631\u0648\u0634\u06cc \u0628\u0631\u0627\u06cc \u0628\u0631\u0642\u0631\u0627\u0631\u06cc \u0627\u0631\u062a\u0628\u0627\u0637 \u0627\u0645\u0646 \u0628\u06cc\u0646 \u062f\u0648 \u0637\u0631\u0641 \u0645\u0639\u0631\u0641\u06cc \u0634\u062f\u0647 \u0627\u0633\u062a.  \u0628\u0627 \u0645\u0639\u0631\u0641\u06cc \u0634\u062f <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/tools.ietf.org\/html\/rfc7519\">RFC 7519<\/a> \u0645\u0634\u062e\u0635\u0627\u062a \u062a\u0648\u0633\u0637 <em>\u0646\u06cc\u0631\u0648\u06cc \u0636\u0631\u0628\u062a \u0645\u0647\u0646\u062f\u0633\u06cc \u0627\u06cc\u0646\u062a\u0631\u0646\u062a<\/em> (IETF).<\/p>\n<p>\u062d\u062a\u06cc \u0627\u06af\u0631 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u0645 \u0627\u0632 JWT \u0628\u0627 \u0647\u0631 \u0646\u0648\u0639 \u0631\u0648\u0634 \u0627\u0631\u062a\u0628\u0627\u0637\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u06cc\u0645\u060c \u0627\u0645\u0631\u0648\u0632\u0647 JWT \u0628\u0631\u0627\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0648 \u0645\u062c\u0648\u0632 \u0627\u0632 \u0637\u0631\u06cc\u0642 HTTP \u0628\u0633\u06cc\u0627\u0631 \u0645\u062d\u0628\u0648\u0628 \u0627\u0633\u062a.<\/p>\n<p>\u0627\u0628\u062a\u062f\u0627 \u0628\u0627\u06cc\u062f \u0686\u0646\u062f \u0648\u06cc\u0698\u06af\u06cc HTTP \u0631\u0627 \u0628\u062f\u0627\u0646\u06cc\u062f.<\/p>\n<p>HTTP \u06cc\u06a9 \u067e\u0631\u0648\u062a\u06a9\u0644 \u0628\u062f\u0648\u0646 \u062d\u0627\u0644\u062a \u0627\u0633\u062a\u060c \u0628\u0647 \u0627\u06cc\u0646 \u0645\u0639\u0646\u06cc \u06a9\u0647 \u06cc\u06a9 \u062f\u0631\u062e\u0648\u0627\u0633\u062a HTTP \u0648\u0636\u0639\u06cc\u062a \u0631\u0627 \u062d\u0641\u0638 \u0646\u0645\u06cc \u06a9\u0646\u062f.  \u0633\u0631\u0648\u0631 \u0627\u0632 \u0647\u06cc\u0686 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0642\u0628\u0644\u06cc \u06a9\u0647 \u062a\u0648\u0633\u0637 \u0647\u0645\u0627\u0646 \u0645\u0634\u062a\u0631\u06cc \u0627\u0631\u0633\u0627\u0644 \u0634\u062f\u0647 \u0627\u0633\u062a \u0627\u0637\u0644\u0627\u0639\u06cc \u0646\u062f\u0627\u0631\u062f.<\/p>\n<p>\u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0647\u0627\u06cc HTTP \u0628\u0627\u06cc\u062f \u0645\u0633\u062a\u0642\u0644 \u0628\u0627\u0634\u0646\u062f.  \u0622\u0646\u0647\u0627 \u0628\u0627\u06cc\u062f \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0647\u0627\u06cc \u0642\u0628\u0644\u06cc \u0631\u0627 \u06a9\u0647 \u06a9\u0627\u0631\u0628\u0631 \u0627\u0646\u062c\u0627\u0645 \u062f\u0627\u062f\u0647 \u0627\u0633\u062a \u062f\u0631 \u062e\u0648\u062f \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u062f\u0631\u062c \u06a9\u0646\u0646\u062f.<\/p>\n<p>\u0686\u0646\u062f \u0631\u0627\u0647 \u0628\u0631\u0627\u06cc \u0627\u0646\u062c\u0627\u0645 \u0627\u06cc\u0646 \u06a9\u0627\u0631 \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f\u060c \u0628\u0627 \u0627\u06cc\u0646 \u062d\u0627\u0644\u060c \u0645\u062d\u0628\u0648\u0628 \u062a\u0631\u06cc\u0646 \u0631\u0627\u0647 \u062a\u0646\u0638\u06cc\u0645 a \u0627\u0633\u062a <em>\u0634\u0646\u0627\u0633\u0647 \u062c\u0644\u0633\u0647<\/em>\u060c \u06a9\u0647 \u0627\u0634\u0627\u0631\u0647 \u0627\u06cc \u0628\u0647 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u06a9\u0627\u0631\u0628\u0631 \u0627\u0633\u062a.<\/p>\n<p>\u0633\u0631\u0648\u0631 \u0627\u06cc\u0646 \u0634\u0646\u0627\u0633\u0647 \u062c\u0644\u0633\u0647 \u0631\u0627 \u062f\u0631 \u062d\u0627\u0641\u0638\u0647 \u06cc\u0627 \u067e\u0627\u06cc\u06af\u0627\u0647 \u062f\u0627\u062f\u0647 \u0630\u062e\u06cc\u0631\u0647 \u0645\u06cc \u06a9\u0646\u062f.  \u0645\u0634\u062a\u0631\u06cc \u0647\u0631 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0631\u0627 \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 \u0627\u06cc\u0646 \u062c\u0644\u0633\u0647 \u0627\u0631\u0633\u0627\u0644 \u0645\u06cc \u06a9\u0646\u062f.  \u0633\u067e\u0633 \u0633\u0631\u0648\u0631 \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u0645\u0631\u062c\u0639 \u0627\u0637\u0644\u0627\u0639\u0627\u062a\u06cc \u062f\u0631 \u0645\u0648\u0631\u062f \u0645\u0634\u062a\u0631\u06cc \u062f\u0631\u06cc\u0627\u0641\u062a \u06a9\u0646\u062f.<\/p>\n<p>\u062f\u0631 \u0627\u06cc\u0646\u062c\u0627 \u0646\u0645\u0648\u062f\u0627\u0631 \u0631\u0648\u0634 \u0639\u0645\u0644\u06a9\u0631\u062f \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 \u062c\u0644\u0633\u0647 \u0627\u0633\u062a:<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/rasanegar.com\/blog\/wp-content\/uploads\/2024\/01\/authentication-and-authorization-in-expressjs-using-jwt-1.png\" alt=\"\u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 session\" title=\"\"><\/p>\n<p>\u0645\u0639\u0645\u0648\u0644\u0627\u064b \u0627\u06cc\u0646 \u0634\u0646\u0627\u0633\u0647 \u062c\u0644\u0633\u0647 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u06cc\u06a9 \u06a9\u0648\u06a9\u06cc \u0628\u0631\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631 \u0627\u0631\u0633\u0627\u0644 \u0645\u06cc \u0634\u0648\u062f.  \u0642\u0628\u0644\u0627\u064b \u062f\u0631 \u0645\u0642\u0627\u0644\u0647 \u0642\u0628\u0644\u06cc Handling Authentication \u062f\u0631 Express.js \u0628\u0647 \u062a\u0641\u0635\u06cc\u0644 \u062f\u0631 \u0645\u0648\u0631\u062f \u0627\u06cc\u0646 \u0645\u0648\u0636\u0648\u0639 \u0635\u062d\u0628\u062a \u06a9\u0631\u062f\u06cc\u0645.<\/p>\n<p>\u0627\u0632 \u0633\u0648\u06cc \u062f\u06cc\u06af\u0631\u060c \u0628\u0627 JWT\u060c \u0632\u0645\u0627\u0646\u06cc \u06a9\u0647 \u0645\u0634\u062a\u0631\u06cc \u06cc\u06a9 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0631\u0627 \u0628\u0647 \u0633\u0631\u0648\u0631 \u0627\u0631\u0633\u0627\u0644 \u0645\u06cc \u06a9\u0646\u062f\u060c \u06cc\u06a9 \u062a\u0648\u06a9\u0646 JSON \u0631\u0627 \u0628\u0631\u0627\u06cc \u0645\u0634\u062a\u0631\u06cc \u0627\u0631\u0633\u0627\u0644 \u0645\u06cc \u06a9\u0646\u062f \u06a9\u0647 \u0634\u0627\u0645\u0644 \u062a\u0645\u0627\u0645 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631 \u0628\u0647 \u0647\u0645\u0631\u0627\u0647 \u067e\u0627\u0633\u062e \u0627\u0633\u062a.<\/p>\n<p>\u0645\u0634\u062a\u0631\u06cc \u0627\u06cc\u0646 \u062a\u0648\u06a9\u0646 \u0631\u0627 \u0628\u0647 \u0647\u0645\u0631\u0627\u0647 \u062a\u0645\u0627\u0645 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0647\u0627\u06cc \u0628\u0639\u062f\u06cc \u0627\u0631\u0633\u0627\u0644 \u0645\u06cc \u06a9\u0646\u062f.  \u0628\u0646\u0627\u0628\u0631\u0627\u06cc\u0646 \u0633\u0631\u0648\u0631 \u0646\u06cc\u0627\u0632\u06cc \u0628\u0647 \u0630\u062e\u06cc\u0631\u0647 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u062c\u0644\u0633\u0647 \u0646\u062e\u0648\u0627\u0647\u062f \u062f\u0627\u0634\u062a.  \u0627\u0645\u0627 \u062f\u0631 \u0627\u06cc\u0646 \u0631\u0648\u06cc\u06a9\u0631\u062f \u0645\u0634\u06a9\u0644\u06cc \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f.  \u0647\u0631 \u06a9\u0633\u06cc \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0628\u0627 \u06cc\u06a9 \u062a\u0648\u06a9\u0646 \u062c\u0639\u0644\u06cc JSON \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u062c\u0639\u0644\u06cc \u0627\u0631\u0633\u0627\u0644 \u06a9\u0646\u062f \u0648 \u0648\u0627\u0646\u0645\u0648\u062f \u06a9\u0646\u062f \u06a9\u0647 \u06a9\u0633\u06cc \u0646\u06cc\u0633\u062a.<\/p>\n<p>\u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u0645\u062b\u0627\u0644\u060c \u0641\u0631\u0636 \u06a9\u0646\u06cc\u062f \u067e\u0633 \u0627\u0632 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a\u060c \u0633\u0631\u0648\u0631 \u06cc\u06a9 \u0634\u06cc JSON \u0631\u0627 \u0628\u0627 \u0646\u0627\u0645 \u06a9\u0627\u0631\u0628\u0631\u06cc \u0648 \u0632\u0645\u0627\u0646 \u0627\u0646\u0642\u0636\u0627 \u0628\u0647 \u0645\u0634\u062a\u0631\u06cc \u0628\u0631\u0645\u06cc\u200c\u06af\u0631\u062f\u0627\u0646\u062f.  \u0628\u0646\u0627\u0628\u0631\u0627\u06cc\u0646 \u0627\u0632 \u0622\u0646\u062c\u0627\u06cc\u06cc \u06a9\u0647 \u0634\u06cc JSON \u0642\u0627\u0628\u0644 \u062e\u0648\u0627\u0646\u062f\u0646 \u0627\u0633\u062a\u060c \u0647\u0631 \u06a9\u0633\u06cc \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0622\u0646 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0631\u0627 \u0648\u06cc\u0631\u0627\u06cc\u0634 \u06a9\u0631\u062f\u0647 \u0648 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0627\u0631\u0633\u0627\u0644 \u06a9\u0646\u062f.  \u0645\u0634\u06a9\u0644 \u0627\u06cc\u0646\u062c\u0627\u0633\u062a \u06a9\u0647 \u0647\u06cc\u0686 \u0631\u0627\u0647\u06cc \u0628\u0631\u0627\u06cc \u062a\u0627\u06cc\u06cc\u062f \u0686\u0646\u06cc\u0646 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u06cc \u0648\u062c\u0648\u062f \u0646\u062f\u0627\u0631\u062f.<\/p>\n<p>\u0627\u06cc\u0646\u062c\u0627\u0633\u062a \u06a9\u0647 \u0627\u0645\u0636\u0627\u06cc \u062a\u0648\u06a9\u0646 \u0648\u0627\u0631\u062f \u0645\u06cc\u200c\u0634\u0648\u062f. \u0628\u0646\u0627\u0628\u0631\u0627\u06cc\u0646 \u0628\u0647\u200c\u062c\u0627\u06cc \u0627\u0631\u0633\u0627\u0644 \u06cc\u06a9 \u0631\u0645\u0632 \u0633\u0627\u062f\u0647 JSON\u060c \u0633\u0631\u0648\u0631 \u06cc\u06a9 \u062a\u0648\u06a9\u0646 \u0627\u0645\u0636\u0627 \u0634\u062f\u0647 \u0627\u0631\u0633\u0627\u0644 \u0645\u06cc\u200c\u06a9\u0646\u062f \u06a9\u0647 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u062a\u0623\u06cc\u06cc\u062f \u06a9\u0646\u062f \u06a9\u0647 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0628\u062f\u0648\u0646 \u062a\u063a\u06cc\u06cc\u0631 \u0647\u0633\u062a\u0646\u062f.<\/p>\n<p>\u062f\u0631 \u0627\u062f\u0627\u0645\u0647 \u0627\u06cc\u0646 \u0645\u0642\u0627\u0644\u0647 \u0628\u0627 \u062c\u0632\u0626\u06cc\u0627\u062a \u0628\u06cc\u0634\u062a\u0631\u06cc \u0628\u0647 \u0622\u0646 \u062e\u0648\u0627\u0647\u06cc\u0645 \u067e\u0631\u062f\u0627\u062e\u062a.<\/p>\n<p>\u062f\u0631 \u0627\u06cc\u0646\u062c\u0627 \u0646\u0645\u0648\u062f\u0627\u0631 \u0631\u0648\u0634 \u0639\u0645\u0644\u06a9\u0631\u062f JWT \u0622\u0645\u062f\u0647 \u0627\u0633\u062a:<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/rasanegar.com\/blog\/wp-content\/uploads\/2024\/01\/authentication-and-authorization-in-expressjs-using-jwt-2.png\" alt=\"json_web_tokens\" title=\"\"><\/p>\n<h2 id=\"structureofajwt\"><span class=\"ez-toc-section\" id=\"%d8%b3%d8%a7%d8%ae%d8%aa%d8%a7%d8%b1_%db%8c%da%a9_jwt\"><\/span>\u0633\u0627\u062e\u062a\u0627\u0631 \u06cc\u06a9 JWT<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>\u0628\u06cc\u0627\u06cc\u06cc\u062f \u062f\u0631 \u0645\u0648\u0631\u062f \u0633\u0627\u062e\u062a\u0627\u0631 \u06cc\u06a9 JWT \u0627\u0632 \u0637\u0631\u06cc\u0642 \u06cc\u06a9 \u062a\u0648\u06a9\u0646 \u0646\u0645\u0648\u0646\u0647 \u0635\u062d\u0628\u062a \u06a9\u0646\u06cc\u0645:<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/rasanegar.com\/blog\/wp-content\/uploads\/2024\/01\/authentication-and-authorization-in-expressjs-using-jwt-3.png\" alt=\"sample_json_web_token_jwt\" title=\"\"><\/p>\n<p>\u0647\u0645\u0627\u0646\u0637\u0648\u0631 \u06a9\u0647 \u062f\u0631 \u062a\u0635\u0648\u06cc\u0631 \u0645\u06cc \u0628\u06cc\u0646\u06cc\u062f\u060c \u0633\u0647 \u0628\u062e\u0634 \u0627\u0632 \u0627\u06cc\u0646 JWT \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f \u06a9\u0647 \u0647\u0631 \u06a9\u062f\u0627\u0645 \u0628\u0627 \u06cc\u06a9 \u0646\u0642\u0637\u0647 \u0627\u0632 \u0647\u0645 \u062c\u062f\u0627 \u0634\u062f\u0647 \u0627\u0646\u062f.<\/p>\n<p>\u0646\u0648\u0627\u0631 \u06a9\u0646\u0627\u0631\u06cc: \u0631\u0645\u0632\u06af\u0630\u0627\u0631\u06cc Base64 \u06cc\u06a9\u06cc \u0627\u0632 \u0631\u0627\u0647\u200c\u0647\u0627\u06cc \u0627\u0637\u0645\u06cc\u0646\u0627\u0646 \u0627\u0632 \u062e\u0631\u0627\u0628 \u0646\u0628\u0648\u062f\u0646 \u062f\u0627\u062f\u0647\u200c\u0647\u0627 \u0627\u0633\u062a\u060c \u0632\u06cc\u0631\u0627 \u062f\u0627\u062f\u0647\u200c\u0647\u0627 \u0631\u0627 \u0641\u0634\u0631\u062f\u0647 \u06cc\u0627 \u0631\u0645\u0632\u06af\u0630\u0627\u0631\u06cc \u0646\u0645\u06cc\u200c\u06a9\u0646\u062f\u060c \u0628\u0644\u06a9\u0647 \u0622\u0646\u200c\u0647\u0627 \u0631\u0627 \u0628\u0647 \u0634\u06a9\u0644\u06cc \u0631\u0645\u0632\u06af\u0630\u0627\u0631\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f \u06a9\u0647 \u0627\u06a9\u062b\u0631 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627 \u0628\u062a\u0648\u0627\u0646\u0646\u062f \u0622\u0646 \u0631\u0627 \u062f\u0631\u06a9 \u06a9\u0646\u0646\u062f.  \u0634\u0645\u0627 \u0645\u06cc \u062a\u0648\u0627\u0646\u06cc\u062f \u0647\u0631 \u0645\u062a\u0646 \u0631\u0645\u0632\u06af\u0630\u0627\u0631\u06cc \u0634\u062f\u0647 Base64 \u0631\u0627 \u0628\u0647 \u0633\u0627\u062f\u06af\u06cc \u0628\u0627 \u0631\u0645\u0632\u06af\u0634\u0627\u06cc\u06cc \u0622\u0646\u0647\u0627 \u0628\u062e\u0648\u0627\u0646\u06cc\u062f.<\/p>\n<p>\u0627\u0648\u0644\u06cc\u0646 \u0628\u062e\u0634 JWT \u0647\u062f\u0631 \u0627\u0633\u062a \u06a9\u0647 \u06cc\u06a9 \u0631\u0634\u062a\u0647 \u06a9\u062f\u06af\u0630\u0627\u0631\u06cc \u0634\u062f\u0647 \u0628\u0627 Base64 \u0627\u0633\u062a.  \u0627\u06af\u0631 \u0647\u062f\u0631 \u0631\u0627 \u0631\u0645\u0632\u06af\u0634\u0627\u06cc\u06cc \u06a9\u0646\u06cc\u062f \u0686\u06cc\u0632\u06cc \u0634\u0628\u06cc\u0647 \u0628\u0647 \u0627\u06cc\u0646 \u062e\u0648\u0627\u0647\u062f \u0628\u0648\u062f:<\/p>\n<pre><code class=\"hljs\">{\n  <span class=\"hljs-attr\">\"alg\"<\/span>: <span class=\"hljs-string\">\"HS256\"<\/span>,\n  <span class=\"hljs-attr\">\"typ\"<\/span>: <span class=\"hljs-string\">\"JWT\"<\/span>\n}\n<\/code><\/pre>\n<p>\u0628\u062e\u0634 \u0647\u062f\u0631 \u0634\u0627\u0645\u0644 \u0627\u0644\u06af\u0648\u0631\u06cc\u062a\u0645 \u0647\u0634 \u0627\u0633\u062a \u06a9\u0647 \u0628\u0631\u0627\u06cc \u062a\u0648\u0644\u06cc\u062f \u0639\u0644\u0627\u0645\u062a \u0648 \u0646\u0648\u0639 \u062a\u0648\u06a9\u0646 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a.<\/p>\n<p>\u0628\u062e\u0634 \u062f\u0648\u0645 payload \u0627\u0633\u062a \u06a9\u0647 \u0634\u0627\u0645\u0644 \u0634\u06cc JSON \u0627\u0633\u062a \u06a9\u0647 \u0628\u0631\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631 \u0627\u0631\u0633\u0627\u0644 \u0634\u062f\u0647 \u0627\u0633\u062a.  \u0627\u0632 \u0622\u0646\u062c\u0627\u06cc\u06cc \u06a9\u0647 \u0627\u06cc\u0646 \u0641\u0642\u0637 \u0628\u0627 Base64 \u0631\u0645\u0632\u06af\u0630\u0627\u0631\u06cc \u0634\u062f\u0647 \u0627\u0633\u062a\u060c \u0647\u0631 \u06a9\u0633\u06cc \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0631\u0627\u062d\u062a\u06cc \u0622\u0646 \u0631\u0627 \u0631\u0645\u0632\u06af\u0634\u0627\u06cc\u06cc \u06a9\u0646\u062f.<\/p>\n<p>\u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc \u0634\u0648\u062f \u0647\u06cc\u0686 \u06af\u0648\u0646\u0647 \u062f\u0627\u062f\u0647 \u062d\u0633\u0627\u0633\u06cc \u0645\u0627\u0646\u0646\u062f \u0631\u0645\u0632 \u0639\u0628\u0648\u0631 \u06cc\u0627 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0642\u0627\u0628\u0644 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062e\u0635\u06cc \u0631\u0627 \u062f\u0631 JWT \u0647\u0627 \u0648\u0627\u0631\u062f \u0646\u06a9\u0646\u06cc\u062f.<\/p>\n<p>\u0645\u0639\u0645\u0648\u0644\u0627\u064b \u0628\u062f\u0646\u0647 JWT \u0686\u06cc\u0632\u06cc \u0634\u0628\u06cc\u0647 \u0628\u0647 \u0627\u06cc\u0646 \u062e\u0648\u0627\u0647\u062f \u0628\u0648\u062f\u060c \u0627\u06af\u0631\u0686\u0647 \u0644\u0632\u0648\u0645\u0627\u064b \u0627\u0639\u0645\u0627\u0644 \u0646\u0645\u06cc \u0634\u0648\u062f:<\/p>\n<pre><code class=\"hljs\">{\n  <span class=\"hljs-attr\">\"sub\"<\/span>: <span class=\"hljs-string\">\"1234567890\"<\/span>,\n  <span class=\"hljs-attr\">\"name\"<\/span>: <span class=\"hljs-string\">\"John Doe\"<\/span>,\n  <span class=\"hljs-attr\">\"iat\"<\/span>: <span class=\"hljs-number\">1516239022<\/span>\n}\n<\/code><\/pre>\n<p>\u0628\u06cc\u0634\u062a\u0631 \u0627\u0648\u0642\u0627\u062a\u060c <code>sub<\/code> \u0648\u06cc\u0698\u06af\u06cc \u0634\u0627\u0645\u0644 \u0634\u0646\u0627\u0633\u0647 \u06a9\u0627\u0631\u0628\u0631\u060c \u0648\u06cc\u0698\u06af\u06cc \u0627\u0633\u062a <code>iat<\/code>\u060c \u06a9\u0647 \u0645\u062e\u0641\u0641 \u0622\u0646 \u0627\u0633\u062a <em>\u0635\u0627\u062f\u0631 \u0634\u062f\u0647 \u062f\u0631<\/em>\u060c \u0645\u0647\u0631 \u0632\u0645\u0627\u0646\u06cc \u0627\u0633\u062a \u06a9\u0647 \u062a\u0648\u06a9\u0646 \u0635\u0627\u062f\u0631 \u0645\u06cc \u0634\u0648\u062f.<\/p>\n<p>\u0647\u0645\u0686\u0646\u06cc\u0646 \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0628\u0631\u062e\u06cc \u0627\u0632 \u062e\u0648\u0627\u0635 \u0631\u0627\u06cc\u062c \u0645\u0627\u0646\u0646\u062f <code>eat<\/code> \u06cc\u0627 <code>exp<\/code>\u060c \u06a9\u0647 \u0632\u0645\u0627\u0646 \u0627\u0646\u0642\u0636\u0627\u06cc \u062a\u0648\u06a9\u0646 \u0627\u0633\u062a.<\/p>\n<p>\u0628\u062e\u0634 \u0622\u062e\u0631 \u0627\u0645\u0636\u0627\u06cc \u062a\u0648\u06a9\u0646 \u0627\u0633\u062a.  \u0627\u06cc\u0646 \u0628\u0627 \u0647\u0634 \u06a9\u0631\u062f\u0646 \u0631\u0634\u062a\u0647 \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc \u0634\u0648\u062f <code>base64UrlEncode(header) + \".\" + base64UrlEncode(payload) + secret<\/code> \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u0644\u06af\u0648\u0631\u06cc\u062a\u0645\u06cc \u06a9\u0647 \u062f\u0631 \u0642\u0633\u0645\u062a \u0647\u062f\u0631 \u0630\u06a9\u0631 \u0634\u062f\u0647 \u0627\u0633\u062a.<\/p>\n<p>\u0631\u0627 <code>secret<\/code> \u06cc\u06a9 \u0631\u0634\u062a\u0647 \u062a\u0635\u0627\u062f\u0641\u06cc \u0627\u0633\u062a \u06a9\u0647 \u0641\u0642\u0637 \u0633\u0631\u0648\u0631 \u0628\u0627\u06cc\u062f \u0622\u0646 \u0631\u0627 \u0628\u062f\u0627\u0646\u062f.  \u0647\u06cc\u0686 \u0647\u0634 \u0631\u0627 \u0646\u0645\u06cc \u062a\u0648\u0627\u0646 \u0628\u0647 \u0645\u062a\u0646 \u0627\u0635\u0644\u06cc \u062a\u0628\u062f\u06cc\u0644 \u06a9\u0631\u062f \u0648 \u062d\u062a\u06cc \u06cc\u06a9 \u062a\u063a\u06cc\u06cc\u0631 \u06a9\u0648\u0686\u06a9 \u062f\u0631 \u0631\u0634\u062a\u0647 \u0627\u0635\u0644\u06cc \u0645\u0646\u062c\u0631 \u0628\u0647 \u0647\u0634 \u0645\u062a\u0641\u0627\u0648\u062a\u06cc \u0645\u06cc \u0634\u0648\u062f.  \u0628\u0646\u0627\u0628\u0631\u0627\u06cc\u0646 <code>secret<\/code> \u0646\u0645\u06cc \u062a\u0648\u0627\u0646 \u0645\u0647\u0646\u062f\u0633\u06cc \u0645\u0639\u06a9\u0648\u0633 \u06a9\u0631\u062f.<\/p>\n<p>\u0647\u0646\u06af\u0627\u0645\u06cc \u06a9\u0647 \u0627\u06cc\u0646 \u0627\u0645\u0636\u0627 \u0628\u0647 \u0633\u0631\u0648\u0631 \u0627\u0631\u0633\u0627\u0644 \u0645\u06cc \u0634\u0648\u062f\u060c \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u062a\u0623\u06cc\u06cc\u062f \u06a9\u0646\u062f \u06a9\u0647 \u06a9\u0644\u0627\u06cc\u0646\u062a \u0647\u06cc\u0686 \u062c\u0632\u0626\u06cc\u0627\u062a\u06cc \u0631\u0627 \u062f\u0631 \u0634\u06cc \u062a\u063a\u06cc\u06cc\u0631 \u0646\u062f\u0627\u062f\u0647 \u0627\u0633\u062a.<\/p>\n<p>\u0637\u0628\u0642 \u0627\u0633\u062a\u0627\u0646\u062f\u0627\u0631\u062f\u0647\u0627\u060c \u06a9\u0644\u0627\u06cc\u0646\u062a \u0628\u0627\u06cc\u062f \u0627\u06cc\u0646 \u062a\u0648\u06a9\u0646 \u0631\u0627 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u062f\u0631\u062e\u0648\u0627\u0633\u062a HTTP \u062f\u0631 \u06cc\u06a9 \u0647\u062f\u0631 \u0628\u0647 \u0646\u0627\u0645 \u0633\u0631\u0648\u0631 \u0627\u0631\u0633\u0627\u0644 \u06a9\u0646\u062f. <code>Authorization<\/code> \u0628\u0627 \u0641\u0631\u0645 <code>Bearer (JWT_TOKEN)<\/code>.  \u0628\u0646\u0627\u0628\u0631\u0627\u06cc\u0646 \u0627\u0631\u0632\u0634 <code>Authorization<\/code> \u0647\u062f\u0631 \u0686\u06cc\u0632\u06cc \u0634\u0628\u06cc\u0647 \u0628\u0647 \u0627\u06cc\u0646 \u062e\u0648\u0627\u0647\u062f \u0628\u0648\u062f:<\/p>\n<pre><code class=\"hljs\">Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.XbPfbIHMI6arZ3Y922BhjWgQzWXcXNrz0ogtVhfEd2o\n<\/code><\/pre>\n<p>\u0627\u06af\u0631 \u0645\u06cc\u200c\u062e\u0648\u0627\u0647\u06cc\u062f \u062f\u0631\u0628\u0627\u0631\u0647 \u0633\u0627\u062e\u062a\u0627\u0631 \u06cc\u06a9 \u062a\u0648\u06a9\u0646 JWT \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0628\u06cc\u0634\u062a\u0631\u06cc \u06a9\u0633\u0628 \u06a9\u0646\u06cc\u062f\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0645\u0642\u0627\u0644\u0647 \u0639\u0645\u06cc\u0642 \u0645\u0627\u060c \u062f\u0631\u06a9 \u062a\u0648\u06a9\u0646\u200c\u0647\u0627\u06cc \u0648\u0628 JSON \u0631\u0627 \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u06cc\u062f.  \u0647\u0645\u0686\u0646\u06cc\u0646 \u0645\u06cc \u062a\u0648\u0627\u0646\u06cc\u062f \u0628\u0627\u0632\u062f\u06cc\u062f \u06a9\u0646\u06cc\u062f <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/jwt.io\/\">jwt.io<\/a> \u0648 \u0628\u0627 \u062f\u06cc\u0628\u0627\u06af\u0631 \u0622\u0646\u0647\u0627 \u0628\u0627\u0632\u06cc \u06a9\u0646\u06cc\u062f:<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/rasanegar.com\/blog\/wp-content\/uploads\/2024\/01\/authentication-and-authorization-in-expressjs-using-jwt-4.png\" alt=\"jwt_debugger\" title=\"\"><\/p>\n<h2 id=\"advantageofusingjwtovertraditionalmethods\"><span class=\"ez-toc-section\" id=\"%d9%85%d8%b2%db%8c%d8%aa_%d8%a7%d8%b3%d8%aa%d9%81%d8%a7%d8%af%d9%87_%d8%a7%d8%b2_jwt_%d9%86%d8%b3%d8%a8%d8%aa_%d8%a8%d9%87_%d8%b1%d9%88%d8%b4_%d9%87%d8%a7%db%8c_%d8%b3%d9%86%d8%aa%db%8c\"><\/span>\u0645\u0632\u06cc\u062a \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 JWT \u0646\u0633\u0628\u062a \u0628\u0647 \u0631\u0648\u0634 \u0647\u0627\u06cc \u0633\u0646\u062a\u06cc<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>\u0647\u0645\u0627\u0646\u0637\u0648\u0631 \u06a9\u0647 \u0642\u0628\u0644\u0627\u064b \u0628\u062d\u062b \u06a9\u0631\u062f\u06cc\u0645\u060c JWT \u0628\u0631\u062e\u0644\u0627\u0641 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 \u062c\u0644\u0633\u0647 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u062a\u0645\u0627\u0645 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u062e\u0648\u062f \u06a9\u0627\u0631\u0628\u0631 \u0631\u0627 \u062f\u0631 \u062e\u0648\u062f \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u062f.<\/p>\n<p>\u0627\u06cc\u0646 \u0628\u0631\u0627\u06cc \u0645\u0642\u06cc\u0627\u0633\u200c\u0628\u0646\u062f\u06cc \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u0648\u0628\u060c \u0645\u0627\u0646\u0646\u062f \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u0648\u0628 \u0628\u0627 \u0645\u06cc\u06a9\u0631\u0648\u0633\u0631\u0648\u06cc\u0633\u200c\u0647\u0627\u060c \u0628\u0633\u06cc\u0627\u0631 \u0645\u0641\u06cc\u062f \u0627\u0633\u062a.  \u0627\u0645\u0631\u0648\u0632\u0647\u060c \u0645\u0639\u0645\u0627\u0631\u06cc \u06cc\u06a9 \u0628\u0631\u0646\u0627\u0645\u0647 \u0648\u0628 \u0645\u062f\u0631\u0646 \u0686\u06cc\u0632\u06cc \u0634\u0628\u06cc\u0647 \u0628\u0647 \u0627\u06cc\u0646 \u0628\u0647 \u0646\u0638\u0631 \u0645\u06cc \u0631\u0633\u062f:<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/rasanegar.com\/blog\/wp-content\/uploads\/2024\/01\/authentication-and-authorization-in-expressjs-using-jwt-8.png\" alt=\"web_application_architecture\" title=\"\"><\/p>\n<p>\u0647\u0645\u0647 \u0627\u06cc\u0646 \u0633\u0631\u0648\u06cc\u0633\u200c\u0647\u0627 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u06cc\u06a9 \u0633\u0631\u0648\u06cc\u0633 \u0628\u0627\u0634\u0646\u062f \u06a9\u0647 \u0628\u0627 \u062a\u0648\u062c\u0647 \u0628\u0647 \u0645\u06cc\u0632\u0627\u0646 \u0645\u0635\u0631\u0641 \u0645\u0646\u0627\u0628\u0639 (CPU \u06cc\u0627 Memory Usage) \u0647\u0631 \u0633\u0631\u0648\u0631 \u06cc\u0627 \u0628\u0631\u062e\u06cc \u0627\u0632 \u0633\u0631\u0648\u06cc\u0633\u200c\u0647\u0627\u06cc \u0645\u062e\u062a\u0644\u0641 \u0645\u0627\u0646\u0646\u062f \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0648 \u063a\u06cc\u0631\u0647 \u062a\u0648\u0633\u0637 Load Balanser \u0647\u062f\u0627\u06cc\u062a \u0645\u06cc\u200c\u0634\u0648\u0646\u062f.<\/p>\n<p>\u0627\u06af\u0631 \u0627\u0632 \u0631\u0648\u0634\u200c\u0647\u0627\u06cc \u0633\u0646\u062a\u06cc \u0645\u062c\u0648\u0632 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u06cc\u0645\u060c \u0645\u0627\u0646\u0646\u062f \u06a9\u0648\u06a9\u06cc\u200c\u0647\u0627\u060c \u0628\u0627\u06cc\u062f \u06cc\u06a9 \u067e\u0627\u06cc\u06af\u0627\u0647 \u062f\u0627\u062f\u0647 \u0631\u0627 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u0645\u060c \u0645\u0627\u0646\u0646\u062f <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/redis.io\/\">\u0631\u062f\u06cc\u0633<\/a>\u0628\u0631\u0627\u06cc \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u06af\u0630\u0627\u0634\u062a\u0646 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u067e\u06cc\u0686\u06cc\u062f\u0647 \u0628\u06cc\u0646 \u0633\u0631\u0648\u0631\u0647\u0627 \u06cc\u0627 \u0633\u0631\u0648\u06cc\u0633 \u0647\u0627\u06cc \u062f\u0627\u062e\u0644\u06cc.  \u0627\u0645\u0627 \u0627\u06af\u0631 \u0631\u0627\u0632 \u0631\u0627 \u062f\u0631 \u0645\u06cc\u0627\u0646 \u0633\u0631\u0648\u06cc\u0633\u200c\u0647\u0627\u06cc \u0645\u06cc\u06a9\u0631\u0648 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u0645\u060c \u0641\u0642\u0637 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u0645 \u0627\u0632 JWT \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u06cc\u0645 \u0648 \u067e\u0633 \u0627\u0632 \u0622\u0646 \u0628\u0647 \u0647\u06cc\u0686 \u0645\u0646\u0628\u0639 \u062e\u0627\u0631\u062c\u06cc \u062f\u06cc\u06af\u0631\u06cc \u0628\u0631\u0627\u06cc \u0645\u062c\u0648\u0632 \u062f\u0627\u062f\u0646 \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0646\u06cc\u0627\u0632 \u0646\u06cc\u0633\u062a.<\/p>\n<h2 id=\"usingjwtwithexpress\"><span class=\"ez-toc-section\" id=\"%d8%a7%d8%b3%d8%aa%d9%81%d8%a7%d8%af%d9%87_%d8%a7%d8%b2_jwt_%d8%a8%d8%a7_express\"><\/span>\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 JWT \u0628\u0627 Express<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>\u062f\u0631 \u0627\u06cc\u0646 \u0622\u0645\u0648\u0632\u0634\u060c \u0645\u0627 \u06cc\u06a9 \u0628\u0631\u0646\u0627\u0645\u0647 \u0648\u0628 \u0633\u0627\u062f\u0647 \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 \u0645\u06cc\u06a9\u0631\u0648\u0633\u0631\u0648\u06cc\u0633 \u0628\u0631\u0627\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a \u06a9\u062a\u0627\u0628\u200c\u0647\u0627 \u062f\u0631 \u06cc\u06a9 \u06a9\u062a\u0627\u0628\u062e\u0627\u0646\u0647 \u0628\u0627 \u062f\u0648 \u0633\u0631\u0648\u06cc\u0633 \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc\u200c\u06a9\u0646\u06cc\u0645.  \u06cc\u06a9\u06cc \u0627\u0632 \u0633\u0631\u0648\u06cc\u0633 \u0647\u0627 \u0645\u0633\u0626\u0648\u0644 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u06a9\u0627\u0631\u0628\u0631 \u0648 \u062f\u06cc\u06af\u0631\u06cc \u0645\u0633\u0626\u0648\u0644 \u0645\u062f\u06cc\u0631\u06cc\u062a \u06a9\u062a\u0627\u0628 \u0647\u0627 \u062e\u0648\u0627\u0647\u062f \u0628\u0648\u062f.<\/p>\n<p>\u062f\u0648 \u0646\u0648\u0639 \u06a9\u0627\u0631\u0628\u0631 \u0648\u062c\u0648\u062f \u062e\u0648\u0627\u0647\u062f \u062f\u0627\u0634\u062a &#8211; <em>\u0645\u062f\u06cc\u0631\u0627\u0646<\/em> \u0648 <em>\u0627\u0639\u0636\u0627<\/em>.  \u0645\u062f\u06cc\u0631\u0627\u0646 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u06a9\u062a\u0627\u0628\u200c\u0647\u0627\u06cc \u062c\u062f\u06cc\u062f \u0631\u0627 \u0645\u0634\u0627\u0647\u062f\u0647 \u0648 \u0627\u0636\u0627\u0641\u0647 \u06a9\u0646\u0646\u062f\u060c \u062f\u0631 \u062d\u0627\u0644\u06cc \u06a9\u0647 \u0627\u0639\u0636\u0627 \u0641\u0642\u0637 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u0622\u0646\u0647\u0627 \u0631\u0627 \u0645\u0634\u0627\u0647\u062f\u0647 \u06a9\u0646\u0646\u062f.  \u062f\u0631 \u062d\u0627\u0644\u062a \u0627\u06cc\u062f\u0647\u200c\u0622\u0644\u060c \u0622\u0646\u0647\u0627 \u0647\u0645\u0686\u0646\u06cc\u0646 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u06a9\u062a\u0627\u0628\u200c\u0647\u0627 \u0631\u0627 \u0648\u06cc\u0631\u0627\u06cc\u0634 \u06cc\u0627 \u062d\u0630\u0641 \u06a9\u0646\u0646\u062f.  \u0627\u0645\u0627 \u0628\u0631\u0627\u06cc \u0633\u0627\u062f\u0647 \u0646\u06af\u0647 \u062f\u0627\u0634\u062a\u0646 \u0627\u06cc\u0646 \u0645\u0642\u0627\u0644\u0647 \u062a\u0627 \u062d\u062f \u0627\u0645\u06a9\u0627\u0646\u060c \u0628\u0647 \u062c\u0632\u0626\u06cc\u0627\u062a \u0622\u0646\u0686\u0646\u0627\u0646\u06cc \u0646\u062e\u0648\u0627\u0647\u06cc\u0645 \u067e\u0631\u062f\u0627\u062e\u062a.<\/p>\n<p>\u0628\u0631\u0627\u06cc \u0634\u0631\u0648\u0639\u060c \u062f\u0631 \u0634\u0645\u0627 terminal \u06cc\u06a9 \u067e\u0631\u0648\u0698\u0647 \u062e\u0627\u0644\u06cc Node.js \u0631\u0627 \u0628\u0627 \u062a\u0646\u0638\u06cc\u0645\u0627\u062a \u067e\u06cc\u0634 \u0641\u0631\u0636 \u0645\u0642\u062f\u0627\u0631\u062f\u0647\u06cc \u06a9\u0646\u06cc\u062f:<\/p>\n<pre><code class=\"hljs\"><span class=\"hljs-meta\">$<\/span><span class=\"bash\"> npm init -y<\/span>\n<\/code><\/pre>\n<p>\u0633\u067e\u0633\u060c \u0628\u06cc\u0627\u06cc\u06cc\u062f \u0686\u0627\u0631\u0686\u0648\u0628 Express \u0631\u0627 \u0646\u0635\u0628 \u06a9\u0646\u06cc\u0645:<\/p>\n<pre><code class=\"hljs\"><span class=\"hljs-meta\">$<\/span><span class=\"bash\"> npm install --save express<\/span>\n<\/code><\/pre>\n<h3 id=\"authenticationservice\"><span class=\"ez-toc-section\" id=\"%d8%b3%d8%b1%d9%88%db%8c%d8%b3_%d8%a7%d8%ad%d8%b1%d8%a7%d8%b2_%d9%87%d9%88%db%8c%d8%aa\"><\/span>\u0633\u0631\u0648\u06cc\u0633 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u0633\u067e\u0633\u060c \u0628\u06cc\u0627\u06cc\u06cc\u062f \u06cc\u06a9 \u0641\u0627\u06cc\u0644 \u0628\u0647 \u0646\u0627\u0645 \u0627\u06cc\u062c\u0627\u062f \u06a9\u0646\u06cc\u0645 <code>auth.js<\/code>\u060c \u06a9\u0647 \u0633\u0631\u0648\u06cc\u0633 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0645\u0627 \u062e\u0648\u0627\u0647\u062f \u0628\u0648\u062f:<\/p>\n<pre><code class=\"hljs\"><span class=\"hljs-keyword\">const<\/span> express = <span class=\"hljs-built_in\">require<\/span>(<span class=\"hljs-string\">'express'<\/span>);\n<span class=\"hljs-keyword\">const<\/span> app = express();\n\napp.listen(<span class=\"hljs-number\">3000<\/span>, <span class=\"hljs-function\">() =&gt;<\/span> {\n    <span class=\"hljs-built_in\">console<\/span>.log(<span class=\"hljs-string\">'Authentication service started \u0631\u0648\u06cc port 3000'<\/span>);\n});\n<\/code><\/pre>\n<p>\u062f\u0631 \u062d\u0627\u0644\u062a \u0627\u06cc\u062f\u0647 \u0622\u0644\u060c \u0645\u0627 \u0628\u0627\u06cc\u062f \u0627\u0632 \u06cc\u06a9 \u067e\u0627\u06cc\u06af\u0627\u0647 \u062f\u0627\u062f\u0647 \u0628\u0631\u0627\u06cc \u0630\u062e\u06cc\u0631\u0647 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u06a9\u0627\u0631\u0628\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u06cc\u0645.  \u0627\u0645\u0627 \u0628\u0631\u0627\u06cc \u0633\u0627\u062f\u0647 \u0646\u06af\u0647 \u062f\u0627\u0634\u062a\u0646 \u0622\u0646\u060c \u0628\u06cc\u0627\u06cc\u06cc\u062f \u06cc\u06a9 \u0622\u0631\u0627\u06cc\u0647 \u0627\u0632 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0627\u06cc\u062c\u0627\u062f \u06a9\u0646\u06cc\u0645 \u06a9\u0647 \u0627\u0632 \u0622\u0646\u0647\u0627 \u0628\u0631\u0627\u06cc \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u062e\u0648\u0627\u0647\u06cc\u0645 \u06a9\u0631\u062f.<\/p>\n<p>\u0628\u0631\u0627\u06cc \u0647\u0631 \u06a9\u0627\u0631\u0628\u0631\u060c \u0646\u0642\u0634 \u0648\u062c\u0648\u062f \u062e\u0648\u0627\u0647\u062f \u062f\u0627\u0634\u062a &#8211; <code>admin<\/code> \u06cc\u0627 <code>member<\/code> \u0628\u0647 \u0634\u06cc \u06a9\u0627\u0631\u0628\u0631 \u062e\u0648\u062f \u0645\u062a\u0635\u0644 \u0645\u06cc \u0634\u0648\u062f.  \u0647\u0645\u0686\u0646\u06cc\u0646\u060c \u0628\u0647 \u06cc\u0627\u062f \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u06cc\u062f \u06a9\u0647 \u0627\u06af\u0631 \u062f\u0631 \u06cc\u06a9 \u0645\u062d\u06cc\u0637 \u062a\u0648\u0644\u06cc\u062f \u0647\u0633\u062a\u06cc\u062f\u060c \u0631\u0645\u0632 \u0639\u0628\u0648\u0631 \u0631\u0627 \u0647\u0634 \u06a9\u0646\u06cc\u062f:<\/p>\n<pre><code class=\"hljs\"><span class=\"hljs-keyword\">const<\/span> users = (\n    {\n        <span class=\"hljs-attr\">username<\/span>: <span class=\"hljs-string\">'john'<\/span>,\n        <span class=\"hljs-attr\">password<\/span>: <span class=\"hljs-string\">'password123admin'<\/span>,\n        <span class=\"hljs-attr\">role<\/span>: <span class=\"hljs-string\">'admin'<\/span>\n    }, {\n        <span class=\"hljs-attr\">username<\/span>: <span class=\"hljs-string\">'anna'<\/span>,\n        <span class=\"hljs-attr\">password<\/span>: <span class=\"hljs-string\">'password123member'<\/span>,\n        <span class=\"hljs-attr\">role<\/span>: <span class=\"hljs-string\">'member'<\/span>\n    }\n);\n<\/code><\/pre>\n<p>\u0627\u06a9\u0646\u0648\u0646 \u0645\u06cc \u062a\u0648\u0627\u0646\u06cc\u0645 \u06cc\u06a9 \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0646\u0646\u062f\u0647 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0628\u0631\u0627\u06cc \u0648\u0631\u0648\u062f \u06a9\u0627\u0631\u0628\u0631 \u0627\u06cc\u062c\u0627\u062f \u06a9\u0646\u06cc\u0645.  \u0628\u06cc\u0627\u06cc\u06cc\u062f \u0646\u0635\u0628 \u06a9\u0646\u06cc\u0645 <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/www.npmjs.com\/package\/jsonwebtoken\">jsonwebtoken<\/a> \u0645\u0627\u0698\u0648\u0644\u060c \u06a9\u0647 \u0628\u0631\u0627\u06cc \u062a\u0648\u0644\u06cc\u062f \u0648 \u062a\u0623\u06cc\u06cc\u062f \u062a\u0648\u06a9\u0646 \u0647\u0627\u06cc JWT \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc \u0634\u0648\u062f.<\/p>\n<p>\u0647\u0645\u0686\u0646\u06cc\u0646\u060c \u0628\u06cc\u0627\u06cc\u06cc\u062f \u0646\u0635\u0628 \u06a9\u0646\u06cc\u0645 <code>body-parser<\/code> \u0645\u06cc\u0627\u0646 \u0627\u0641\u0632\u0627\u0631 \u0628\u0631\u0627\u06cc \u062a\u062c\u0632\u06cc\u0647 \u0628\u062f\u0646\u0647 JSON \u0627\u0632 \u062f\u0631\u062e\u0648\u0627\u0633\u062a HTTP:<\/p>\n<pre><code class=\"hljs\"><span class=\"hljs-meta\">$<\/span><span class=\"bash\"> npm i --save body-parser jsonwebtoken<\/span>\n<\/code><\/pre>\n<p>\u062d\u0627\u0644\u0627 \u0628\u06cc\u0627\u06cc\u06cc\u062f \u0627\u06cc\u0646 \u0645\u0627\u0698\u0648\u0644 \u0647\u0627 \u0631\u0627 \u062f\u0631 \u0628\u0631\u0646\u0627\u0645\u0647 Express \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u06a9\u0646\u06cc\u0645:<\/p>\n<pre><code class=\"hljs\"><span class=\"hljs-keyword\">const<\/span> jwt = <span class=\"hljs-built_in\">require<\/span>(<span class=\"hljs-string\">'jsonwebtoken'<\/span>);\n<span class=\"hljs-keyword\">const<\/span> bodyParser = <span class=\"hljs-built_in\">require<\/span>(<span class=\"hljs-string\">'body-parser'<\/span>);\n\napp.use(bodyParser.json());\n<\/code><\/pre>\n<p>\u0627\u06a9\u0646\u0648\u0646 \u0645\u06cc \u062a\u0648\u0627\u0646\u06cc\u0645 \u06cc\u06a9 \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0646\u0646\u062f\u0647 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0628\u0631\u0627\u06cc \u0631\u0633\u06cc\u062f\u06af\u06cc \u0628\u0647 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0648\u0631\u0648\u062f \u06a9\u0627\u0631\u0628\u0631 \u0627\u06cc\u062c\u0627\u062f \u06a9\u0646\u06cc\u0645:<\/p>\n<pre><code class=\"hljs\"><span class=\"hljs-keyword\">const<\/span> accessTokenSecret = <span class=\"hljs-string\">'youraccesstokensecret'<\/span>;\n<\/code><\/pre>\n<p>\u0627\u06cc\u0646 \u0631\u0627\u0632 \u0634\u0645\u0627 \u0628\u0631\u0627\u06cc \u0627\u0645\u0636\u0627\u06cc \u062a\u0648\u06a9\u0646 JWT \u0627\u0633\u062a.  \u0634\u0645\u0627 \u0647\u0631\u06af\u0632 \u0646\u0628\u0627\u06cc\u062f \u0627\u06cc\u0646 \u0631\u0627\u0632 \u0631\u0627 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f\u060c \u062f\u0631 \u063a\u06cc\u0631 \u0627\u06cc\u0646 \u0635\u0648\u0631\u062a \u06cc\u06a9 \u0628\u0627\u0632\u06cc\u06af\u0631 \u0628\u062f \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0627\u0632 \u0622\u0646 \u0628\u0631\u0627\u06cc \u062c\u0639\u0644 \u062a\u0648\u06a9\u0646 \u0647\u0627\u06cc JWT \u0628\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0628\u0647 \u0633\u0631\u0648\u06cc\u0633 \u0634\u0645\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u062f.  \u0647\u0631\u0686\u0647 \u0627\u06cc\u0646 \u062a\u0648\u06a9\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u06cc\u0686\u06cc\u062f\u0647 \u062a\u0631 \u0628\u0627\u0634\u062f\u060c \u0628\u0631\u0646\u0627\u0645\u0647 \u0634\u0645\u0627 \u0627\u0645\u0646 \u062a\u0631 \u062e\u0648\u0627\u0647\u062f \u0628\u0648\u062f.  \u0628\u0646\u0627\u0628\u0631\u0627\u06cc\u0646 \u0633\u0639\u06cc \u06a9\u0646\u06cc\u062f \u0627\u0632 \u06cc\u06a9 \u0631\u0634\u062a\u0647 \u062a\u0635\u0627\u062f\u0641\u06cc \u067e\u06cc\u0686\u06cc\u062f\u0647 \u0628\u0631\u0627\u06cc \u0627\u06cc\u0646 \u062a\u0648\u06a9\u0646 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u06cc\u062f:<\/p>\n<pre><code class=\"hljs\">app.post(<span class=\"hljs-string\">'\/login'<\/span>, <span class=\"hljs-function\">(<span class=\"hljs-params\">req, res<\/span>) =&gt;<\/span> {\n    <span class=\"hljs-comment\">\/\/ Read username and password from request body<\/span>\n    <span class=\"hljs-keyword\">const<\/span> { username, password } = req.body;\n\n    <span class=\"hljs-comment\">\/\/ Filter user from the users array by username and password<\/span>\n    <span class=\"hljs-keyword\">const<\/span> user = users.find(<span class=\"hljs-function\"><span class=\"hljs-params\">u<\/span> =&gt;<\/span> { <span class=\"hljs-keyword\">return<\/span> u.username === username &amp;&amp; u.password === password });\n\n    <span class=\"hljs-keyword\">if<\/span> (user) {\n        <span class=\"hljs-comment\">\/\/ Generate an access token<\/span>\n        <span class=\"hljs-keyword\">const<\/span> accessToken = jwt.sign({ <span class=\"hljs-attr\">username<\/span>: user.username,  <span class=\"hljs-attr\">role<\/span>: user.role }, accessTokenSecret);\n\n        res.json({\n            accessToken\n        });\n    } <span class=\"hljs-keyword\">else<\/span> {\n        res.send(<span class=\"hljs-string\">'Username or password incorrect'<\/span>);\n    }\n});\n<\/code><\/pre>\n<p>\u062f\u0631 \u0627\u06cc\u0646 \u06a9\u0646\u062a\u0631\u0644\u0631\u060c \u06a9\u0627\u0631\u0628\u0631\u06cc \u0631\u0627 \u062c\u0633\u062a\u062c\u0648 \u06a9\u0631\u062f\u0647 \u0627\u06cc\u0645 \u06a9\u0647 \u0628\u0627 \u0646\u0627\u0645 \u06a9\u0627\u0631\u0628\u0631\u06cc \u0648 \u0631\u0645\u0632 \u0639\u0628\u0648\u0631 \u0645\u0648\u062c\u0648\u062f \u062f\u0631 \u0628\u062f\u0646\u0647 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0645\u0637\u0627\u0628\u0642\u062a \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u062f.  \u0633\u067e\u0633 \u06cc\u06a9 \u0646\u0634\u0627\u0646\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0627 \u06cc\u06a9 \u0634\u06cc JSON \u0628\u0627 \u0646\u0627\u0645 \u06a9\u0627\u0631\u0628\u0631\u06cc \u0648 \u0646\u0642\u0634 \u06a9\u0627\u0631\u0628\u0631 \u0627\u06cc\u062c\u0627\u062f \u06a9\u0631\u062f\u0647 \u0627\u06cc\u0645.<\/p>\n<p>\u0633\u0631\u0648\u06cc\u0633 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0645\u0627 \u0622\u0645\u0627\u062f\u0647 \u0627\u0633\u062a.  \u0628\u06cc\u0627\u06cc\u06cc\u062f \u0622\u0646 \u0631\u0627 \u0628\u0627 \u0627\u062c\u0631\u0627 \u0631\u0627\u0647 \u0627\u0646\u062f\u0627\u0632\u06cc \u06a9\u0646\u06cc\u0645:<\/p>\n<pre><code class=\"hljs\"><span class=\"hljs-meta\">$<\/span><span class=\"bash\"> node auth.js<\/span>\n<\/code><\/pre>\n<p>\u067e\u0633 \u0627\u0632 \u0631\u0627\u0647 \u0627\u0646\u062f\u0627\u0632\u06cc \u0633\u0631\u0648\u06cc\u0633 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a\u060c \u0628\u06cc\u0627\u06cc\u06cc\u062f \u06cc\u06a9 \u062f\u0631\u062e\u0648\u0627\u0633\u062a POST \u0627\u0631\u0633\u0627\u0644 \u06a9\u0646\u06cc\u0645 \u0648 \u0628\u0628\u06cc\u0646\u06cc\u0645 \u0622\u06cc\u0627 \u06a9\u0627\u0631 \u0645\u06cc \u06a9\u0646\u062f \u06cc\u0627 \u062e\u06cc\u0631.<\/p>\n<p>\u0645\u0646 \u0627\u0632 rest-client \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u062e\u0648\u0627\u0647\u0645 \u06a9\u0631\u062f <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/insomnia.rest\/\">\u0628\u06cc\u062e\u0648\u0627\u0628\u06cc<\/a> \u0628\u0631\u0627\u06cc \u0627\u0646\u062c\u0627\u0645 \u0627\u06cc\u0646.  \u0628\u0647 \u0631\u0627\u062d\u062a\u06cc \u0645\u06cc \u062a\u0648\u0627\u0646\u06cc\u062f \u0627\u0632 \u0647\u0631 \u0633\u0631\u0648\u06cc\u0633 \u06af\u06cc\u0631\u0646\u062f\u0647 \u0627\u0633\u062a\u0631\u0627\u062d\u062a\u06cc \u06a9\u0647 \u062a\u0631\u062c\u06cc\u062d \u0645\u06cc \u062f\u0647\u06cc\u062f \u06cc\u0627 \u0686\u06cc\u0632\u06cc \u0645\u0627\u0646\u0646\u062f Postman \u0628\u0631\u0627\u06cc \u0627\u06cc\u0646 \u06a9\u0627\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u06cc\u062f.<\/p>\n<p>\u0628\u06cc\u0627\u06cc\u06cc\u062f \u06cc\u06a9 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u067e\u0633\u062a \u0628\u0647 <code>http:\/\/localhost:3000\/login<\/code> \u0646\u0642\u0637\u0647 \u067e\u0627\u06cc\u0627\u0646\u06cc \u0628\u0627 JSON \u0632\u06cc\u0631:<\/p>\n<pre><code class=\"hljs\">{\n    <span class=\"hljs-attr\">\"username\"<\/span>: <span class=\"hljs-string\">\"john\"<\/span>,\n    <span class=\"hljs-attr\">\"password\"<\/span>: <span class=\"hljs-string\">\"password123admin\"<\/span>\n}\n<\/code><\/pre>\n<p>\u0634\u0645\u0627 \u0628\u0627\u06cc\u062f \u0646\u0634\u0627\u0646\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u0631\u0627 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u067e\u0627\u0633\u062e \u062f\u0631\u06cc\u0627\u0641\u062a \u06a9\u0646\u06cc\u062f:<\/p>\n<pre><code class=\"hljs\">{\n  <span class=\"hljs-attr\">\"accessToken\"<\/span>: <span class=\"hljs-string\">\"eyJhbGciOiJIUz...\"<\/span>\n}\n<\/code><\/pre>\n<p><img decoding=\"async\" src=\"https:\/\/rasanegar.com\/blog\/wp-content\/uploads\/2024\/01\/authentication-and-authorization-in-expressjs-using-jwt-5.png\" alt=\"insomnia_access\" title=\"\"><\/p>\n<h3 id=\"booksservice\"><span class=\"ez-toc-section\" id=\"%d8%ae%d8%af%d9%85%d8%a7%d8%aa_%da%a9%d8%aa%d8%a7%d8%a8\"><\/span>\u062e\u062f\u0645\u0627\u062a \u06a9\u062a\u0627\u0628<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u0628\u0627 \u0627\u0646\u062c\u0627\u0645 \u0627\u06cc\u0646 \u06a9\u0627\u0631\u060c \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u06cc\u062f a \u0627\u06cc\u062c\u0627\u062f \u06a9\u0646\u06cc\u0645 <code>books.js<\/code> \u0641\u0627\u06cc\u0644 \u0628\u0631\u0627\u06cc \u062e\u062f\u0645\u0627\u062a \u06a9\u062a\u0627\u0628 \u0645\u0627.<\/p>\n<p>\u0645\u0627 \u0641\u0627\u06cc\u0644 \u0631\u0627 \u0628\u0627 \u0648\u0627\u0631\u062f \u06a9\u0631\u062f\u0646 \u06a9\u062a\u0627\u0628\u062e\u0627\u0646\u0647\u200c\u0647\u0627\u06cc \u0645\u0648\u0631\u062f \u0646\u06cc\u0627\u0632 \u0648 \u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u0628\u0631\u0646\u0627\u0645\u0647 Express \u0634\u0631\u0648\u0639 \u0645\u06cc\u200c\u06a9\u0646\u06cc\u0645:<\/p>\n<pre><code class=\"hljs\"><span class=\"hljs-keyword\">const<\/span> express = <span class=\"hljs-built_in\">require<\/span>(<span class=\"hljs-string\">'express'<\/span>);\n<span class=\"hljs-keyword\">const<\/span> bodyParser = <span class=\"hljs-built_in\">require<\/span>(<span class=\"hljs-string\">'body-parser'<\/span>);\n<span class=\"hljs-keyword\">const<\/span> jwt = <span class=\"hljs-built_in\">require<\/span>(<span class=\"hljs-string\">'jsonwebtoken'<\/span>);\n\n<span class=\"hljs-keyword\">const<\/span> app = express();\n\napp.use(bodyParser.json());\n\napp.listen(<span class=\"hljs-number\">4000<\/span>, <span class=\"hljs-function\">() =&gt;<\/span> {\n    <span class=\"hljs-built_in\">console<\/span>.log(<span class=\"hljs-string\">'Books service started \u0631\u0648\u06cc port 4000'<\/span>);\n});\n<\/code><\/pre>\n<p>\u067e\u0633 \u0627\u0632 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc\u060c \u0628\u0631\u0627\u06cc \u0634\u0628\u06cc\u0647 \u0633\u0627\u0632\u06cc \u06cc\u06a9 \u067e\u0627\u06cc\u06af\u0627\u0647 \u062f\u0627\u062f\u0647\u060c \u0641\u0642\u0637 \u06cc\u06a9 \u0622\u0631\u0627\u06cc\u0647 \u0627\u0632 \u06a9\u062a\u0627\u0628 \u0647\u0627 \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc \u06a9\u0646\u06cc\u0645:<\/p>\n<pre><code class=\"hljs\"><span class=\"hljs-keyword\">const<\/span> books = (\n    {\n        <span class=\"hljs-string\">\"author\"<\/span>: <span class=\"hljs-string\">\"Chinua Achebe\"<\/span>,\n        <span class=\"hljs-string\">\"country\"<\/span>: <span class=\"hljs-string\">\"Nigeria\"<\/span>,\n        <span class=\"hljs-string\">\"language\"<\/span>: <span class=\"hljs-string\">\"English\"<\/span>,\n        <span class=\"hljs-string\">\"pages\"<\/span>: <span class=\"hljs-number\">209<\/span>,\n        <span class=\"hljs-string\">\"title\"<\/span>: <span class=\"hljs-string\">\"Things Fall Apart\"<\/span>,\n        <span class=\"hljs-string\">\"year\"<\/span>: <span class=\"hljs-number\">1958<\/span>\n    },\n    {\n        <span class=\"hljs-string\">\"author\"<\/span>: <span class=\"hljs-string\">\"Hans Christian Andersen\"<\/span>,\n        <span class=\"hljs-string\">\"country\"<\/span>: <span class=\"hljs-string\">\"Denmark\"<\/span>,\n        <span class=\"hljs-string\">\"language\"<\/span>: <span class=\"hljs-string\">\"Danish\"<\/span>,\n        <span class=\"hljs-string\">\"pages\"<\/span>: <span class=\"hljs-number\">784<\/span>,\n        <span class=\"hljs-string\">\"title\"<\/span>: <span class=\"hljs-string\">\"Fairy tales\"<\/span>,\n        <span class=\"hljs-string\">\"year\"<\/span>: <span class=\"hljs-number\">1836<\/span>\n    },\n    {\n        <span class=\"hljs-string\">\"author\"<\/span>: <span class=\"hljs-string\">\"Dante Alighieri\"<\/span>,\n        <span class=\"hljs-string\">\"country\"<\/span>: <span class=\"hljs-string\">\"Italy\"<\/span>,\n        <span class=\"hljs-string\">\"language\"<\/span>: <span class=\"hljs-string\">\"Italian\"<\/span>,\n        <span class=\"hljs-string\">\"pages\"<\/span>: <span class=\"hljs-number\">928<\/span>,\n        <span class=\"hljs-string\">\"title\"<\/span>: <span class=\"hljs-string\">\"The Divine Comedy\"<\/span>,\n        <span class=\"hljs-string\">\"year\"<\/span>: <span class=\"hljs-number\">1315<\/span>\n    },\n);\n<\/code><\/pre>\n<p>\u0627\u06a9\u0646\u0648\u0646\u060c \u0645\u0627 \u0645\u06cc \u062a\u0648\u0627\u0646\u06cc\u0645 \u06cc\u06a9 \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0646\u0646\u062f\u0647 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0628\u0633\u06cc\u0627\u0631 \u0633\u0627\u062f\u0647 \u0628\u0631\u0627\u06cc \u0628\u0627\u0632\u06cc\u0627\u0628\u06cc \u0647\u0645\u0647 \u06a9\u062a\u0627\u0628 \u0647\u0627 \u0627\u0632 \u067e\u0627\u06cc\u06af\u0627\u0647 \u062f\u0627\u062f\u0647 \u0627\u06cc\u062c\u0627\u062f \u06a9\u0646\u06cc\u0645:<\/p>\n<pre><code class=\"hljs\">app.get(<span class=\"hljs-string\">'\/books'<\/span>, <span class=\"hljs-function\">(<span class=\"hljs-params\">req, res<\/span>) =&gt;<\/span> {\n    res.json(books);\n});\n<\/code><\/pre>\n<p>\u0632\u06cc\u0631\u0627 \u06a9\u062a\u0627\u0628 \u0647\u0627\u06cc \u0645\u0627 \u0628\u0627\u06cc\u062f \u0641\u0642\u0637 \u0628\u0631\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062a\u0627\u06cc\u06cc\u062f \u0634\u062f\u0647 \u0642\u0627\u0628\u0644 \u0645\u0634\u0627\u0647\u062f\u0647 \u0628\u0627\u0634\u062f.  \u0645\u0627 \u0628\u0627\u06cc\u062f \u06cc\u06a9 \u0645\u06cc\u0627\u0646 \u0627\u0641\u0632\u0627\u0631 \u0628\u0631\u0627\u06cc \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0627\u06cc\u062c\u0627\u062f \u06a9\u0646\u06cc\u0645.<\/p>\n<p>\u0642\u0628\u0644 \u0627\u0632 \u0622\u0646\u060c \u0631\u0645\u0632 \u062f\u0633\u062a\u0631\u0633\u06cc \u0631\u0627 \u0628\u0631\u0627\u06cc \u0627\u0645\u0636\u0627\u06cc JWT \u0627\u06cc\u062c\u0627\u062f \u06a9\u0646\u06cc\u062f\u060c \u062f\u0631\u0633\u062a \u0645\u0627\u0646\u0646\u062f \u0642\u0628\u0644:<\/p>\n<pre><code class=\"hljs\"><span class=\"hljs-keyword\">const<\/span> accessTokenSecret = <span class=\"hljs-string\">'youraccesstokensecret'<\/span>;\n<\/code><\/pre>\n<p>\u0627\u06cc\u0646 \u062a\u0648\u06a9\u0646 \u0628\u0627\u06cc\u062f \u0647\u0645\u0627\u0646 \u062a\u0648\u06a9\u0646 \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u062f\u0631 \u0633\u0631\u0648\u06cc\u0633 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0628\u0627\u0634\u062f.  \u0628\u0627 \u062a\u0648\u062c\u0647 \u0628\u0647 \u0627\u06cc\u0646\u06a9\u0647 \u0631\u0627\u0632 \u0628\u06cc\u0646 \u0622\u0646\u0647\u0627 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u06af\u0630\u0627\u0634\u062a\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a\u060c \u0645\u0627 \u0645\u06cc \u062a\u0648\u0627\u0646\u06cc\u0645 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0633\u0631\u0648\u06cc\u0633 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u06a9\u0646\u06cc\u0645 \u0648 \u0633\u067e\u0633 \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062f\u0631 \u0633\u0631\u0648\u06cc\u0633 \u06a9\u062a\u0627\u0628 \u0645\u062c\u0648\u0632 \u062f\u0647\u06cc\u0645.<\/p>\n<p>\u062f\u0631 \u0627\u06cc\u0646 \u0645\u0631\u062d\u0644\u0647\u060c \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u06cc\u062f \u0645\u06cc\u0627\u0646 \u0627\u0641\u0632\u0627\u0631 Express \u0627\u06cc\u062c\u0627\u062f \u06a9\u0646\u06cc\u0645 \u06a9\u0647 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0631\u0627 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0645\u06cc \u06a9\u0646\u062f process:<\/p>\n<pre><code class=\"hljs\"><span class=\"hljs-keyword\">const<\/span> authenticateJWT = <span class=\"hljs-function\">(<span class=\"hljs-params\">req, res, next<\/span>) =&gt;<\/span> {\n    <span class=\"hljs-keyword\">const<\/span> authHeader = req.headers.authorization;\n\n    <span class=\"hljs-keyword\">if<\/span> (authHeader) {\n        <span class=\"hljs-keyword\">const<\/span> token = authHeader.split(<span class=\"hljs-string\">' '<\/span>)(<span class=\"hljs-number\">1<\/span>);\n\n        jwt.verify(token, accessTokenSecret, <span class=\"hljs-function\">(<span class=\"hljs-params\">err, user<\/span>) =&gt;<\/span> {\n            <span class=\"hljs-keyword\">if<\/span> (err) {\n                <span class=\"hljs-keyword\">return<\/span> res.sendStatus(<span class=\"hljs-number\">403<\/span>);\n            }\n\n            req.user = user;\n            next();\n        });\n    } <span class=\"hljs-keyword\">else<\/span> {\n        res.sendStatus(<span class=\"hljs-number\">401<\/span>);\n    }\n};\n<\/code><\/pre>\n<p>\u062f\u0631 \u0627\u06cc\u0646 \u0645\u06cc\u0627\u0646 \u0627\u0641\u0632\u0627\u0631\u060c \u0645\u0642\u062f\u0627\u0631 \u0647\u062f\u0631 \u0645\u062c\u0648\u0632 \u0631\u0627 \u0645\u06cc \u062e\u0648\u0627\u0646\u06cc\u0645.  \u0627\u0632 \u0622\u0646\u062c\u0627 \u06a9\u0647 <code>authorization<\/code> \u0647\u062f\u0631 \u06cc\u06a9 \u0645\u0642\u062f\u0627\u0631 \u062f\u0631 \u0642\u0627\u0644\u0628 \u062f\u0627\u0631\u062f <code>Bearer (JWT_TOKEN)<\/code>\u060c \u0645\u0642\u062f\u0627\u0631 \u0631\u0627 \u0628\u0627 \u0641\u0627\u0635\u0644\u0647 \u062a\u0642\u0633\u06cc\u0645 \u06a9\u0631\u062f\u0647 \u0648 \u062a\u0648\u06a9\u0646 \u0631\u0627 \u0627\u0632 \u0647\u0645 \u062c\u062f\u0627 \u06a9\u0631\u062f\u0647 \u0627\u06cc\u0645.<\/p>\n<p>\u0633\u067e\u0633 \u062a\u0648\u06a9\u0646 \u0631\u0627 \u0628\u0627 JWT \u062a\u0623\u06cc\u06cc\u062f \u06a9\u0631\u062f\u06cc\u0645.  \u067e\u0633 \u0627\u0632 \u062a\u0623\u06cc\u06cc\u062f\u060c \u0645\u0627 \u0622\u0646 \u0631\u0627 \u0645\u062a\u0635\u0644 \u0645\u06cc \u06a9\u0646\u06cc\u0645 <code>user<\/code> \u0628\u0647 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0627\u0639\u062a\u0631\u0627\u0636 \u06a9\u0646\u06cc\u062f \u0648 \u0627\u062f\u0627\u0645\u0647 \u062f\u0647\u06cc\u062f.  \u062f\u0631 \u063a\u06cc\u0631 \u0627\u06cc\u0646 \u0635\u0648\u0631\u062a \u06cc\u06a9 \u062e\u0637\u0627 \u0628\u0631\u0627\u06cc \u0645\u0634\u062a\u0631\u06cc \u0627\u0631\u0633\u0627\u0644 \u0645\u06cc \u06a9\u0646\u06cc\u0645.<\/p>\n<p>\u0645\u0627 \u0645\u06cc \u062a\u0648\u0627\u0646\u06cc\u0645 \u0627\u06cc\u0646 \u0645\u06cc\u0627\u0646 \u0627\u0641\u0632\u0627\u0631 \u0631\u0627 \u062f\u0631 \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0646\u0646\u062f\u0647 \u062f\u0631\u062e\u0648\u0627\u0633\u062a GET \u062e\u0648\u062f \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u06a9\u0646\u06cc\u0645\u060c \u0645\u0627\u0646\u0646\u062f \u0627\u06cc\u0646:<\/p>\n<pre><code class=\"hljs\">app.get(<span class=\"hljs-string\">'\/books'<\/span>, authenticateJWT, <span class=\"hljs-function\">(<span class=\"hljs-params\">req, res<\/span>) =&gt;<\/span> {\n    res.json(books);\n});\n<\/code><\/pre>\n<p>\u0628\u06cc\u0627\u06cc\u06cc\u062f \u0633\u0631\u0648\u0631 \u0631\u0627 \u0628\u0648\u062a \u06a9\u0646\u06cc\u0645 \u0648 \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u06cc\u0645 \u06a9\u0647 \u0622\u06cc\u0627 \u0647\u0645\u0647 \u0686\u06cc\u0632 \u062f\u0631\u0633\u062a \u06a9\u0627\u0631 \u0645\u06cc \u06a9\u0646\u062f \u06cc\u0627 \u062e\u06cc\u0631:<\/p>\n<pre><code class=\"hljs\"><span class=\"hljs-meta\">$<\/span><span class=\"bash\"> node books.js<\/span>\n<\/code><\/pre>\n<p>\u0627\u06a9\u0646\u0648\u0646 \u0645\u06cc \u062a\u0648\u0627\u0646\u06cc\u0645 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u06cc \u0631\u0627 \u0628\u0631\u0627\u06cc <code>http:\/\/localhost:4000\/books<\/code> \u0646\u0642\u0637\u0647 \u067e\u0627\u06cc\u0627\u0646\u06cc \u0628\u0631\u0627\u06cc \u0628\u0627\u0632\u06cc\u0627\u0628\u06cc \u0647\u0645\u0647 \u06a9\u062a\u0627\u0628 \u0647\u0627 \u0627\u0632 \u067e\u0627\u06cc\u06af\u0627\u0647 \u062f\u0627\u062f\u0647.<\/p>\n<p>\u0627\u0637\u0645\u06cc\u0646\u0627\u0646 \u062d\u0627\u0635\u0644 \u06a9\u0646\u06cc\u062f \u06a9\u0647 \u0647\u062f\u0631 &#8220;Authorization&#8221; \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0647\u06cc\u062f \u062a\u0627 \u062d\u0627\u0648\u06cc \u0645\u0642\u062f\u0627\u0631 &#8220;Bearer (JWT_TOKEN)&#8221; \u0628\u0627\u0634\u062f\u060c \u0647\u0645\u0627\u0646\u0637\u0648\u0631 \u06a9\u0647 \u062f\u0631 \u062a\u0635\u0648\u06cc\u0631 \u0632\u06cc\u0631 \u0646\u0634\u0627\u0646 \u062f\u0627\u062f\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a:<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/rasanegar.com\/blog\/wp-content\/uploads\/2024\/01\/authentication-and-authorization-in-expressjs-using-jwt-6.png\" alt=\"\u0628\u06cc \u062e\u0648\u0627\u0628\u06cc_\u06a9\u062a\u0627\u0628 \u0647\u0627\" title=\"\"><\/p>\n<p>\u062f\u0631 \u0646\u0647\u0627\u06cc\u062a\u060c \u0645\u0627 \u0645\u06cc \u062a\u0648\u0627\u0646\u06cc\u0645 \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0646\u0646\u062f\u0647 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u062e\u0648\u062f \u0631\u0627 \u0628\u0631\u0627\u06cc \u0627\u06cc\u062c\u0627\u062f \u06cc\u06a9 \u06a9\u062a\u0627\u0628 \u0627\u06cc\u062c\u0627\u062f \u06a9\u0646\u06cc\u0645.  \u0632\u06cc\u0631\u0627 \u0641\u0642\u0637 \u06cc\u06a9 <code>admin<\/code> \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u06cc\u06a9 \u06a9\u062a\u0627\u0628 \u062c\u062f\u06cc\u062f \u0627\u0636\u0627\u0641\u0647 \u06a9\u0646\u062f\u060c \u062f\u0631 \u0627\u06cc\u0646 \u06a9\u0646\u062a\u0631\u0644\u0631 \u0628\u0627\u06cc\u062f \u0646\u0642\u0634 \u06a9\u0627\u0631\u0628\u0631 \u0631\u0627 \u0646\u06cc\u0632 \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u06cc\u0645.<\/p>\n<p>\u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u0645 \u0627\u0632 \u0645\u06cc\u0627\u0646\u200c\u0627\u0641\u0632\u0627\u0631 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u06a9\u0647 \u062f\u0631 \u0628\u0627\u0644\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f\u0647\u200c\u0627\u06cc\u0645 \u0646\u06cc\u0632 \u062f\u0631 \u0627\u06cc\u0646 \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u06cc\u0645:<\/p>\n<pre><code class=\"hljs\">app.post(<span class=\"hljs-string\">'\/books'<\/span>, authenticateJWT, <span class=\"hljs-function\">(<span class=\"hljs-params\">req, res<\/span>) =&gt;<\/span> {\n    <span class=\"hljs-keyword\">const<\/span> { role } = req.user;\n\n    <span class=\"hljs-keyword\">if<\/span> (role !== <span class=\"hljs-string\">'admin'<\/span>) {\n        <span class=\"hljs-keyword\">return<\/span> res.sendStatus(<span class=\"hljs-number\">403<\/span>);\n    }\n\n\n    <span class=\"hljs-keyword\">const<\/span> book = req.body;\n    books.push(book);\n\n    res.send(<span class=\"hljs-string\">'Book added successfully'<\/span>);\n});\n<\/code><\/pre>\n<p>\u0627\u0632 \u0622\u0646\u062c\u0627\u06cc\u06cc \u06a9\u0647 \u0645\u06cc\u0627\u0646 \u0627\u0641\u0632\u0627\u0631 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u06a9\u0627\u0631\u0628\u0631 \u0631\u0627 \u0628\u0647 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0645\u062a\u0635\u0644 \u0645\u06cc \u06a9\u0646\u062f\u060c \u0645\u06cc \u062a\u0648\u0627\u0646\u06cc\u0645 \u0622\u0646 \u0631\u0627 \u0648\u0627\u06a9\u0634\u06cc \u06a9\u0646\u06cc\u0645 <code>role<\/code> \u0627\u0632 <code>req.user<\/code> \u0634\u06cc \u0648 \u0628\u0647 \u0633\u0627\u062f\u06af\u06cc \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u06cc\u062f \u06a9\u0647 \u0622\u06cc\u0627 \u06a9\u0627\u0631\u0628\u0631 \u06cc\u06a9 \u0627\u0633\u062a <code>admin<\/code>.  \u0627\u06af\u0631 \u0686\u0646\u06cc\u0646 \u0627\u0633\u062a\u060c \u06a9\u062a\u0627\u0628 \u0627\u0636\u0627\u0641\u0647 \u0645\u06cc \u0634\u0648\u062f\u060c \u062f\u0631 \u063a\u06cc\u0631 \u0627\u06cc\u0646 \u0635\u0648\u0631\u062a\u060c \u06cc\u06a9 \u062e\u0637\u0627 \u067e\u0631\u062a\u0627\u0628 \u0645\u06cc \u0634\u0648\u062f.<\/p>\n<p>\u0628\u06cc\u0627\u06cc\u06cc\u062f \u0627\u06cc\u0646 \u0631\u0627 \u0628\u0627 \u0645\u0634\u062a\u0631\u06cc REST \u062e\u0648\u062f \u0627\u0645\u062a\u062d\u0627\u0646 \u06a9\u0646\u06cc\u0645.  \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u06cc\u06a9 \u0648\u0627\u0631\u062f \u0634\u0648\u06cc\u062f <code>admin<\/code> \u06a9\u0627\u0631\u0628\u0631 (\u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0647\u0645\u0627\u0646 \u0631\u0648\u0634 \u0628\u0627\u0644\u0627) \u0648 \u0633\u067e\u0633 \u0622\u0646 \u0631\u0627 \u06a9\u067e\u06cc \u06a9\u0646\u06cc\u062f <code>accessToken<\/code> \u0648 \u0622\u0646 \u0631\u0627 \u0628\u0627 <code>Authorization<\/code> \u0647\u062f\u0631 \u0647\u0645\u0627\u0646\u0637\u0648\u0631 \u06a9\u0647 \u062f\u0631 \u0645\u062b\u0627\u0644 \u0642\u0628\u0644\u06cc \u0627\u0646\u062c\u0627\u0645 \u062f\u0627\u062f\u06cc\u0645.<\/p>\n<p>\u0633\u067e\u0633 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u0645 \u06cc\u06a9 \u062f\u0631\u062e\u0648\u0627\u0633\u062a POST \u0628\u0647 \u0622\u0646 \u0627\u0631\u0633\u0627\u0644 \u06a9\u0646\u06cc\u0645 <code>http:\/\/localhost:4000\/books<\/code> \u0646\u0642\u0637\u0647 \u067e\u0627\u06cc\u0627\u0646\u06cc:<\/p>\n<pre><code class=\"hljs\">{\n    <span class=\"hljs-attr\">\"author\"<\/span>: <span class=\"hljs-string\">\"Jane Austen\"<\/span>,\n    <span class=\"hljs-attr\">\"country\"<\/span>: <span class=\"hljs-string\">\"United Kingdom\"<\/span>,\n    <span class=\"hljs-attr\">\"language\"<\/span>: <span class=\"hljs-string\">\"English\"<\/span>,\n    <span class=\"hljs-attr\">\"pages\"<\/span>: <span class=\"hljs-number\">226<\/span>,\n    <span class=\"hljs-attr\">\"title\"<\/span>: <span class=\"hljs-string\">\"Pride and Prejudice\"<\/span>,\n    <span class=\"hljs-attr\">\"year\"<\/span>: <span class=\"hljs-number\">1813<\/span>\n}\n<\/code><\/pre>\n<p><img decoding=\"async\" src=\"https:\/\/rasanegar.com\/blog\/wp-content\/uploads\/2024\/01\/authentication-and-authorization-in-expressjs-using-jwt-7.png\" alt=\"insomnia_add_book\" title=\"\"><\/p>\n<h3 id=\"tokenrefresh\"><span class=\"ez-toc-section\" id=\"%d9%86%d9%88%d8%b3%d8%a7%d8%b2%db%8c_%d8%b1%d9%85%d8%b2\"><\/span>\u0646\u0648\u0633\u0627\u0632\u06cc \u0631\u0645\u0632<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u062f\u0631 \u0627\u06cc\u0646 \u0645\u0631\u062d\u0644\u0647\u060c \u0628\u0631\u0646\u0627\u0645\u0647 \u0645\u0627 \u0647\u0645 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0648 \u0647\u0645 \u0645\u062c\u0648\u0632 \u0633\u0631\u0648\u06cc\u0633 \u06a9\u062a\u0627\u0628 \u0631\u0627 \u06a9\u0646\u062a\u0631\u0644 \u0645\u06cc\u200c\u06a9\u0646\u062f\u060c \u0627\u06af\u0631\u0686\u0647 \u06cc\u06a9 \u0645\u0648\u0631\u062f \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f <em>\u0639\u0645\u062f\u0647<\/em> \u0627\u0634\u06a9\u0627\u0644 \u062f\u0631 \u0637\u0631\u0627\u062d\u06cc &#8211; \u062a\u0648\u06a9\u0646 JWT \u0647\u0631\u06af\u0632 \u0645\u0646\u0642\u0636\u06cc \u0646\u0645\u06cc \u0634\u0648\u062f.<\/p>\n<p>\u0627\u06af\u0631 \u0627\u06cc\u0646 \u062a\u0648\u06a9\u0646 \u0628\u0647 \u0633\u0631\u0642\u062a \u0631\u0641\u062a\u0647 \u0628\u0627\u0634\u062f\u060c \u0622\u0646\u200c\u0647\u0627 \u0628\u0631\u0627\u06cc \u0647\u0645\u06cc\u0634\u0647 \u0628\u0647 \u062d\u0633\u0627\u0628 \u062f\u0633\u062a\u0631\u0633\u06cc \u062e\u0648\u0627\u0647\u0646\u062f \u062f\u0627\u0634\u062a \u0648 \u06a9\u0627\u0631\u0628\u0631 \u0648\u0627\u0642\u0639\u06cc \u0646\u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u062f\u0633\u062a\u0631\u0633\u06cc \u0631\u0627 \u0644\u063a\u0648 \u06a9\u0646\u062f.<\/p>\n<p>\u0628\u0631\u0627\u06cc \u062d\u0630\u0641 \u0627\u06cc\u0646 \u0627\u0645\u06a9\u0627\u0646\u060c \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u06cc\u062f \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0646\u0646\u062f\u0647 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0648\u0631\u0648\u062f \u062e\u0648\u062f \u0631\u0627 \u0628\u0647 \u0631\u0648\u0632 \u06a9\u0646\u06cc\u0645 \u062a\u0627 \u0631\u0645\u0632 \u067e\u0633 \u0627\u0632 \u06cc\u06a9 \u062f\u0648\u0631\u0647 \u062e\u0627\u0635 \u0645\u0646\u0642\u0636\u06cc \u0634\u0648\u062f.  \u0645\u0627 \u0645\u06cc \u062a\u0648\u0627\u0646\u06cc\u0645 \u0627\u06cc\u0646 \u06a9\u0627\u0631 \u0631\u0627 \u0628\u0627 \u0639\u0628\u0648\u0631 \u0627\u0632 <code>expiresIn<\/code> \u062f\u0627\u0631\u0627\u06cc\u06cc \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u06af\u0632\u06cc\u0646\u0647 \u0627\u06cc \u0628\u0631\u0627\u06cc \u0627\u0645\u0636\u0627\u06cc JWT.<\/p>\n<p>\u0647\u0646\u06af\u0627\u0645\u06cc \u06a9\u0647 \u06cc\u06a9 \u062a\u0648\u06a9\u0646 \u0645\u0646\u0642\u0636\u06cc \u0645\u06cc \u06a9\u0646\u06cc\u0645\u060c \u0628\u0627\u06cc\u062f \u0627\u0633\u062a\u0631\u0627\u062a\u0698\u06cc \u062a\u0648\u0644\u06cc\u062f \u06cc\u06a9 \u062a\u0648\u06a9\u0646 \u062c\u062f\u06cc\u062f \u0631\u0627 \u0646\u06cc\u0632 \u062f\u0631 \u0635\u0648\u0631\u062a \u0627\u0646\u0642\u0636\u0627 \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u06cc\u0645.  \u0628\u0631\u0627\u06cc \u0627\u0646\u062c\u0627\u0645 \u0627\u06cc\u0646 \u06a9\u0627\u0631\u060c \u06cc\u06a9 \u062a\u0648\u06a9\u0646 JWT \u062c\u062f\u0627\u06af\u0627\u0646\u0647 \u0628\u0647 \u0646\u0627\u0645 a \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc \u06a9\u0646\u06cc\u0645 <em>\u0646\u0634\u0627\u0646\u0647 \u0631\u0641\u0631\u0634<\/em>\u060c \u06a9\u0647 \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0628\u0631\u0627\u06cc \u062a\u0648\u0644\u06cc\u062f \u06cc\u06a9 \u0645\u0648\u0631\u062f \u062c\u062f\u06cc\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0634\u0648\u062f.<\/p>\n<p>\u0627\u0628\u062a\u062f\u0627 \u06cc\u06a9 \u0631\u0645\u0632 \u0631\u0645\u0632 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0648 \u06cc\u06a9 \u0622\u0631\u0627\u06cc\u0647 \u062e\u0627\u0644\u06cc \u0628\u0631\u0627\u06cc \u0630\u062e\u06cc\u0631\u0647 \u062a\u0648\u06a9\u0646\u200c\u0647\u0627\u06cc \u062a\u0627\u0632\u0647 \u0627\u06cc\u062c\u0627\u062f \u06a9\u0646\u06cc\u062f:<\/p>\n<pre><code class=\"hljs\"><span class=\"hljs-keyword\">const<\/span> refreshTokenSecret = <span class=\"hljs-string\">'yourrefreshtokensecrethere'<\/span>;\n<span class=\"hljs-keyword\">const<\/span> refreshTokens = ();\n<\/code><\/pre>\n<p>\u0647\u0646\u06af\u0627\u0645\u06cc \u06a9\u0647 \u06cc\u06a9 \u06a9\u0627\u0631\u0628\u0631 \u0648\u0627\u0631\u062f \u0633\u06cc\u0633\u062a\u0645 \u0645\u06cc \u0634\u0648\u062f\u060c \u0628\u0647 \u062c\u0627\u06cc \u062a\u0648\u0644\u06cc\u062f \u06cc\u06a9 \u062a\u0648\u06a9\u0646\u060c \u0647\u0645 \u062a\u0648\u06a9\u0646 \u0647\u0627\u06cc \u062a\u0627\u0632\u0647 \u0633\u0627\u0632\u06cc \u0648 \u0647\u0645 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0631\u0627 \u0627\u06cc\u062c\u0627\u062f \u06a9\u0646\u06cc\u062f:<\/p>\n<pre><code class=\"hljs\">app.post(<span class=\"hljs-string\">'\/login'<\/span>, <span class=\"hljs-function\">(<span class=\"hljs-params\">req, res<\/span>) =&gt;<\/span> {\n    <span class=\"hljs-comment\">\/\/ read username and password from request body<\/span>\n    <span class=\"hljs-keyword\">const<\/span> { username, password } = req.body;\n\n    <span class=\"hljs-comment\">\/\/ filter user from the users array by username and password<\/span>\n    <span class=\"hljs-keyword\">const<\/span> user = users.find(<span class=\"hljs-function\"><span class=\"hljs-params\">u<\/span> =&gt;<\/span> { <span class=\"hljs-keyword\">return<\/span> u.username === username &amp;&amp; u.password === password });\n\n    <span class=\"hljs-keyword\">if<\/span> (user) {\n        <span class=\"hljs-comment\">\/\/ generate an access token<\/span>\n        <span class=\"hljs-keyword\">const<\/span> accessToken = jwt.sign({ <span class=\"hljs-attr\">username<\/span>: user.username, <span class=\"hljs-attr\">role<\/span>: user.role }, accessTokenSecret, { <span class=\"hljs-attr\">expiresIn<\/span>: <span class=\"hljs-string\">'20m'<\/span> });\n        <span class=\"hljs-keyword\">const<\/span> refreshToken = jwt.sign({ <span class=\"hljs-attr\">username<\/span>: user.username, <span class=\"hljs-attr\">role<\/span>: user.role }, refreshTokenSecret);\n\n        refreshTokens.push(refreshToken);\n\n        res.json({\n            accessToken,\n            refreshToken\n        });\n    } <span class=\"hljs-keyword\">else<\/span> {\n        res.send(<span class=\"hljs-string\">'Username or password incorrect'<\/span>);\n    }\n});\n<\/code><\/pre>\n<p>\u0648 \u0627\u06a9\u0646\u0648\u0646\u060c \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u06cc\u062f \u06cc\u06a9 \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0646\u0646\u062f\u0647 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0627\u06cc\u062c\u0627\u062f \u06a9\u0646\u06cc\u0645 \u06a9\u0647 \u0628\u0631 \u0627\u0633\u0627\u0633 \u062a\u0648\u06a9\u0646 \u0647\u0627\u06cc \u062c\u062f\u06cc\u062f \u062a\u0648\u0644\u06cc\u062f \u0645\u06cc \u06a9\u0646\u062f \u0631\u0648\u06cc \u0646\u0634\u0627\u0646\u0647 \u0647\u0627\u06cc \u062a\u0627\u0632\u0647 \u0633\u0627\u0632\u06cc:<\/p>\n<pre><code class=\"hljs\">app.post(<span class=\"hljs-string\">'\/token'<\/span>, <span class=\"hljs-function\">(<span class=\"hljs-params\">req, res<\/span>) =&gt;<\/span> {\n    <span class=\"hljs-keyword\">const<\/span> { token } = req.body;\n\n    <span class=\"hljs-keyword\">if<\/span> (!token) {\n        <span class=\"hljs-keyword\">return<\/span> res.sendStatus(<span class=\"hljs-number\">401<\/span>);\n    }\n\n    <span class=\"hljs-keyword\">if<\/span> (!refreshTokens.includes(token)) {\n        <span class=\"hljs-keyword\">return<\/span> res.sendStatus(<span class=\"hljs-number\">403<\/span>);\n    }\n\n    jwt.verify(token, refreshTokenSecret, <span class=\"hljs-function\">(<span class=\"hljs-params\">err, user<\/span>) =&gt;<\/span> {\n        <span class=\"hljs-keyword\">if<\/span> (err) {\n            <span class=\"hljs-keyword\">return<\/span> res.sendStatus(<span class=\"hljs-number\">403<\/span>);\n        }\n\n        <span class=\"hljs-keyword\">const<\/span> accessToken = jwt.sign({ <span class=\"hljs-attr\">username<\/span>: user.username, <span class=\"hljs-attr\">role<\/span>: user.role }, accessTokenSecret, { <span class=\"hljs-attr\">expiresIn<\/span>: <span class=\"hljs-string\">'20m'<\/span> });\n\n        res.json({\n            accessToken\n        });\n    });\n});\n<\/code><\/pre>\n<p>\u0627\u0645\u0627 \u062f\u0631 \u0627\u06cc\u0646 \u0645\u0648\u0631\u062f \u0646\u06cc\u0632 \u06cc\u06a9 \u0645\u0634\u06a9\u0644 \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f.  \u0627\u06af\u0631 \u0646\u0634\u0627\u0646\u0647 \u0631\u0641\u0631\u0634 \u0627\u0632 \u06a9\u0627\u0631\u0628\u0631 \u0628\u0647 \u0633\u0631\u0642\u062a \u0631\u0641\u062a\u0647 \u0628\u0627\u0634\u062f\u060c \u0634\u062e\u0635\u06cc \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0627\u0632 \u0622\u0646 \u0628\u0631\u0627\u06cc \u062a\u0648\u0644\u06cc\u062f \u0647\u0631 \u062a\u0639\u062f\u0627\u062f \u062a\u0648\u06a9\u0646 \u062c\u062f\u06cc\u062f \u06a9\u0647 \u0645\u06cc \u062e\u0648\u0627\u0647\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u062f.<\/p>\n<p>\u0628\u0631\u0627\u06cc \u062c\u0644\u0648\u06af\u06cc\u0631\u06cc \u0627\u0632 \u0627\u06cc\u0646\u060c \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u06cc\u062f \u06cc\u06a9 \u0633\u0627\u062f\u0647 \u067e\u06cc\u0627\u062f\u0647 \u0633\u0627\u0632\u06cc \u06a9\u0646\u06cc\u0645 <code>logout<\/code> \u062a\u0627\u0628\u0639:<\/p>\n<pre><code class=\"hljs\">app.post(<span class=\"hljs-string\">'\/logout'<\/span>, <span class=\"hljs-function\">(<span class=\"hljs-params\">req, res<\/span>) =&gt;<\/span> {\n    <span class=\"hljs-keyword\">const<\/span> { token } = req.body;\n    refreshTokens = refreshTokens.filter(<span class=\"hljs-function\"><span class=\"hljs-params\">token<\/span> =&gt;<\/span> t !== token);\n\n    res.send(<span class=\"hljs-string\">\"Logout successful\"<\/span>);\n});\n<\/code><\/pre>\n<p>\u0647\u0646\u06af\u0627\u0645\u06cc \u06a9\u0647 \u06a9\u0627\u0631\u0628\u0631 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u062e\u0631\u0648\u062c \u0627\u0632 \u0633\u06cc\u0633\u062a\u0645 \u0631\u0627 \u0645\u06cc \u062f\u0647\u062f\u060c \u0645\u0627 \u0646\u0634\u0627\u0646\u0647 \u0631\u0641\u0631\u0634 \u0631\u0627 \u0627\u0632 \u0622\u0631\u0627\u06cc\u0647 \u062e\u0648\u062f \u062d\u0630\u0641 \u0645\u06cc \u06a9\u0646\u06cc\u0645.  \u0627\u06cc\u0646 \u0627\u0637\u0645\u06cc\u0646\u0627\u0646 \u0631\u0627 \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc \u06a9\u0646\u062f \u06a9\u0647 \u0648\u0642\u062a\u06cc \u06a9\u0627\u0631\u0628\u0631 \u0627\u0632 \u0633\u06cc\u0633\u062a\u0645 \u062e\u0627\u0631\u062c \u0645\u06cc \u0634\u0648\u062f\u060c \u0647\u06cc\u0686 \u06a9\u0633 \u0646\u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0627\u0632 \u0646\u0634\u0627\u0646\u0647 refresh \u0628\u0631\u0627\u06cc \u0627\u06cc\u062c\u0627\u062f \u06cc\u06a9 \u0646\u0634\u0627\u0646\u0647 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u062c\u062f\u06cc\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u062f.<\/p>\n<h2 id=\"conclusion\"><span class=\"ez-toc-section\" id=\"%d9%86%d8%aa%db%8c%d8%ac%d9%87\"><\/span>\u0646\u062a\u06cc\u062c\u0647<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>\u062f\u0631 \u0627\u06cc\u0646 \u0645\u0642\u0627\u0644\u0647 \u0634\u0645\u0627 \u0631\u0627 \u0628\u0627 JWT \u0648 \u0631\u0648\u0634 \u067e\u06cc\u0627\u062f\u0647 \u0633\u0627\u0632\u06cc JWT \u0628\u0627 Express \u0622\u0634\u0646\u0627 \u06a9\u0631\u062f\u0647 \u0627\u06cc\u0645.  \u0627\u0645\u06cc\u062f\u0648\u0627\u0631\u0645 \u0627\u06a9\u0646\u0648\u0646 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u062e\u0648\u0628\u06cc \u062f\u0631 \u0645\u0648\u0631\u062f \u0631\u0648\u0634 \u06a9\u0627\u0631 JWT \u0648 \u0631\u0648\u0634 \u067e\u06cc\u0627\u062f\u0647 \u0633\u0627\u0632\u06cc \u0622\u0646 \u062f\u0631 \u067e\u0631\u0648\u0698\u0647 \u062e\u0648\u062f \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u06cc\u062f.<\/p>\n<p>\u0645\u062b\u0644 \u0647\u0645\u06cc\u0634\u0647 \u06a9\u062f \u0645\u0646\u0628\u0639 \u062f\u0631 \u062f\u0633\u062a\u0631\u0633 \u0627\u0633\u062a <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/github.com\/jkasun\/stack-abuse-express-jwt\">GitHub<\/a>.<\/p>\n<\/div>\n<p>    (\u0628\u0631\u0686\u0633\u0628\u200c\u0647\u0627 \u0628\u0631\u0627\u06cc \u062a\u0631\u062c\u0645\u0647)# \u062c\u0627\u0648\u0627 \u0627\u0633\u06a9\u0631\u06cc\u067e\u062a<br \/>\n<br \/><br \/>\n<br \/>\u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647 \u062f\u0631 1403-01-22 12:19:04<br \/>\n<\/p>\n\n\n<div class=\"kk-star-ratings kksr-auto kksr-align-center kksr-valign-bottom\"\n    data-payload='{&quot;align&quot;:&quot;center&quot;,&quot;id&quot;:&quot;16237&quot;,&quot;slug&quot;:&quot;default&quot;,&quot;valign&quot;:&quot;bottom&quot;,&quot;ignore&quot;:&quot;&quot;,&quot;reference&quot;:&quot;auto&quot;,&quot;class&quot;:&quot;&quot;,&quot;count&quot;:&quot;0&quot;,&quot;legendonly&quot;:&quot;&quot;,&quot;readonly&quot;:&quot;&quot;,&quot;score&quot;:&quot;0&quot;,&quot;starsonly&quot;:&quot;&quot;,&quot;best&quot;:&quot;5&quot;,&quot;gap&quot;:&quot;5&quot;,&quot;greet&quot;:&quot;\u0627\u0645\u062a\u06cc\u0627\u0632 \u0634\u0645\u0627 \u0628\u0647 \u0627\u06cc\u0646 \u0645\u0637\u0644\u0628&quot;,&quot;legend&quot;:&quot;0\\\/5 (0 \u0631\u0627\u06cc)&quot;,&quot;size&quot;:&quot;30&quot;,&quot;title&quot;:&quot;\u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0648 \u0645\u062c\u0648\u0632 \u0628\u0627 JWT \u0647\u0627 \u062f\u0631 Express.js \u062f\u0631 \u0627\u06cc\u0646 \u0645\u0642\u0627\u0644\u0647\u060c \u0645\u0627 \u062f\u0631 \u0645\u0648\u0631\u062f \u0631\u0648\u0634 \u0639\u0645\u0644\u06a9\u0631\u062f JSON Web Tokens\u060c \u0645\u0632\u0627\u06cc\u0627\u06cc \u0622\u0646\u0647\u0627\u060c \u0633\u0627\u062e\u062a\u0627\u0631 \u0622\u0646\u0647\u0627 \u0648 \u0631\u0648\u0634 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0646\u0647\u0627 \u0628\u0631\u0627\u06cc \u0627\u0646\u062c\u0627\u0645 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0648 \u0645\u062c\u0648\u0632 \u0627\u0648\u0644\u06cc\u0647 \u062f\u0631 Express \u0635\u062d\u0628\u062a \u062e\u0648\u0627\u0647\u06cc\u0645 \u06a9\u0631\u062f.  \u0644\u0627\u0632\u0645 \u0646\u06cc\u0633\u062a \u062a\u062c\u0631\u0628\u0647 \u0642\u0628\u0644\u06cc \u0628\u0627 JSON Web Tokens \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u06cc\u062f \u0632\u06cc\u0631\u0627 \u0645\u0627...&quot;,&quot;width&quot;:&quot;0&quot;,&quot;_legend&quot;:&quot;{score}\\\/{best} ({count} \u0631\u0627\u06cc)&quot;,&quot;font_factor&quot;:&quot;1.25&quot;}'>\n            \n<div class=\"kksr-stars\">\n    \n<div class=\"kksr-stars-inactive\">\n            <div class=\"kksr-star\" data-star=\"1\" style=\"padding-left: 5px\">\n            \n\n<div class=\"kksr-icon\" style=\"width: 30px; height: 30px;\"><\/div>\n        <\/div>\n            <div class=\"kksr-star\" data-star=\"2\" style=\"padding-left: 5px\">\n            \n\n<div class=\"kksr-icon\" style=\"width: 30px; height: 30px;\"><\/div>\n        <\/div>\n            <div class=\"kksr-star\" data-star=\"3\" style=\"padding-left: 5px\">\n            \n\n<div class=\"kksr-icon\" style=\"width: 30px; height: 30px;\"><\/div>\n        <\/div>\n            <div class=\"kksr-star\" data-star=\"4\" style=\"padding-left: 5px\">\n            \n\n<div class=\"kksr-icon\" style=\"width: 30px; height: 30px;\"><\/div>\n        <\/div>\n            <div class=\"kksr-star\" data-star=\"5\" style=\"padding-left: 5px\">\n            \n\n<div class=\"kksr-icon\" style=\"width: 30px; height: 30px;\"><\/div>\n        <\/div>\n    <\/div>\n    \n<div class=\"kksr-stars-active\" style=\"width: 0px;\">\n            <div class=\"kksr-star\" style=\"padding-left: 5px\">\n            \n\n<div class=\"kksr-icon\" style=\"width: 30px; height: 30px;\"><\/div>\n        <\/div>\n            <div class=\"kksr-star\" style=\"padding-left: 5px\">\n            \n\n<div class=\"kksr-icon\" style=\"width: 30px; height: 30px;\"><\/div>\n        <\/div>\n            <div class=\"kksr-star\" style=\"padding-left: 5px\">\n            \n\n<div class=\"kksr-icon\" style=\"width: 30px; height: 30px;\"><\/div>\n        <\/div>\n            <div class=\"kksr-star\" style=\"padding-left: 5px\">\n            \n\n<div class=\"kksr-icon\" style=\"width: 30px; height: 30px;\"><\/div>\n        <\/div>\n            <div class=\"kksr-star\" style=\"padding-left: 5px\">\n            \n\n<div class=\"kksr-icon\" style=\"width: 30px; height: 30px;\"><\/div>\n        <\/div>\n    <\/div>\n<\/div>\n                \n\n<div class=\"kksr-legend\" style=\"font-size: 24px;\">\n            <span class=\"kksr-muted\">\u0627\u0645\u062a\u06cc\u0627\u0632 \u0634\u0645\u0627 \u0628\u0647 \u0627\u06cc\u0646 \u0645\u0637\u0644\u0628<\/span>\n    <\/div>\n    <\/div>\n","protected":false},"excerpt":{"rendered":"<p><span class=\"span-reading-time rt-reading-time\" style=\"display: block;\"><span class=\"rt-label rt-prefix\">\u0632\u0645\u0627\u0646 \u0644\u0627\u0632\u0645 \u0628\u0631\u0627\u06cc \u0645\u0637\u0627\u0644\u0639\u0647: <\/span> <span class=\"rt-time\"> 10<\/span> <span class=\"rt-label rt-postfix\">\u062f\u0642\u06cc\u0642\u0647<\/span><\/span>\u0645\u0639\u0631\u0641\u06cc \u062f\u0631 \u0627\u06cc\u0646 \u0645\u0642\u0627\u0644\u0647\u060c \u0645\u0627 \u062f\u0631 \u0645\u0648\u0631\u062f \u0631\u0648\u0634 \u0639\u0645\u0644\u06a9\u0631\u062f JSON Web Tokens\u060c \u0645\u0632\u0627\u06cc\u0627\u06cc \u0622\u0646\u0647\u0627\u060c \u0633\u0627\u062e\u062a\u0627\u0631 \u0622\u0646\u0647\u0627 \u0648 \u0631\u0648\u0634 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0646\u0647\u0627 \u0628\u0631\u0627\u06cc \u0627\u0646\u062c\u0627\u0645 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0648 \u0645\u062c\u0648\u0632 \u0627\u0648\u0644\u06cc\u0647 \u062f\u0631 Express \u0635\u062d\u0628\u062a \u062e\u0648\u0627\u0647\u06cc\u0645 \u06a9\u0631\u062f. \u0644\u0627\u0632\u0645 \u0646\u06cc\u0633\u062a \u062a\u062c\u0631\u0628\u0647 \u0642\u0628\u0644\u06cc \u0628\u0627 JSON Web Tokens \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u06cc\u062f \u0632\u06cc\u0631\u0627 \u0627\u0632 \u0627\u0628\u062a\u062f\u0627 \u062f\u0631 \u0645\u0648\u0631\u062f \u0622\u0646 \u0635\u062d\u0628\u062a \u062e\u0648\u0627\u0647\u06cc\u0645 \u06a9\u0631\u062f. \u0628\u0631\u0627\u06cc \u0628\u062e\u0634 \u067e\u06cc\u0627\u062f\u0647 [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1772,620],"tags":[],"class_list":["post-16237","post","type-post","status-publish","format-standard","hentry","category-javascript","category-programming"],"acf":[],"_links":{"self":[{"href":"https:\/\/rasanegaar.com\/blog\/wp-json\/wp\/v2\/posts\/16237","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/rasanegaar.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rasanegaar.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rasanegaar.com\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/rasanegaar.com\/blog\/wp-json\/wp\/v2\/comments?post=16237"}],"version-history":[{"count":0,"href":"https:\/\/rasanegaar.com\/blog\/wp-json\/wp\/v2\/posts\/16237\/revisions"}],"wp:attachment":[{"href":"https:\/\/rasanegaar.com\/blog\/wp-json\/wp\/v2\/media?parent=16237"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rasanegaar.com\/blog\/wp-json\/wp\/v2\/categories?post=16237"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rasanegaar.com\/blog\/wp-json\/wp\/v2\/tags?post=16237"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}