Nodejs expressユーザー登録及び授権bcrypt+JWT

set(val) {
     
	return require('bcrypt').hashSync(val, 10) //     /  
}

const isPasswordValid = require('bcrypt').compareSync(
	req.body.password,
	user.password
)

const SECRET = 'secretmiyao'
const jwt = require('jsonwebtoken')
const token = jwt.sign({
     
    id: String(user._id),
},SECRET) //         ，      ，     git ，        

//     token   header 
Authorization: Bearer imatokenimatokenimatokenimatokenimatoken;

//   token 
const jwt = require('jsonwebtoken')
app.get('/api/profile', async (req, res) => {
     
    const raw= String(req.String(req.headers.authorization).split(' ').pop())
    const tokenData = jwt.verify(raw, SECRET)
    //      { id } = jwt.verify(raw, SECRET)
})

//   
const auth = async (req, res, next) => {
     
    const raw= String(req.String(req.headers.authorization).split(' ').pop())
    const {
      id } = jwt.verify(raw, SECRET)
    req.user = awai User.findById(id) //    req   ，           
    next()
}
app.get('/api/profile', auth(), async (req, res) => {
     
    res.send(req.user)
})