import jwt;

def authenticate_user(token):

try:

decoded = jwt.decode(token, 'secret_key', algorithms=['HS256'])

return decoded['user_id']

except jwt.ExpiredSignatureError:

return None

]]>

CREATE TABLE scores (

user_id INT,

score INT,

created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP

);

]]>

SELECT user_id, score FROM scores ORDER BY score DESC LIMIT 10;

]]>

// 示例：Express.js 中的中间件

app.use((req, res, next) => {

const token = req.cookies.token;

if (!token) return res.status(401).send('Unauthorized');

try {

const decoded = jwt.verify(token, 'shared_secret');

req.user = decoded;

next();

} catch (err) {

res.status(403).send('Invalid Token');

}

});

]]>