NestJS JWTModule报错：secretOrPrivateKey must have a value 求助

即使直接在JWTModule配置中传入密钥而非使用环境变量，仍持续收到以下错误：

Error: secretOrPrivateKey must have a value

业务流程 #

• 客户端携带{ username: string, password: string }调用/auth/login接口
• LocalStrategy Guard调用AuthService的validateUser方法，该方法调用ldapServices的authenticateUser方法并返回用户信息
• 从LDAP获取用户数据并与MongoDB中的用户数据合并，此部分功能正常
• 通过Guard验证后，调用AuthService的login方法，该方法需使用NestJS提供的JwtService创建并签名JWT载荷，问题出在此环节

相关代码文件 #

app.controller.ts #

import { Controller, Get, Post, Request, UseGuards } from '@nestjs/common';
import { AppService } from './app.service';
import { AuthService } from './providers/auth/auth.service';
import { LocalAuthGuard } from './providers/auth/local.strategy';

@Controller()
export class AppController {
  constructor(private readonly authService: AuthService) {}

  @UseGuards(LocalAuthGuard)
  @Post('/auth/login')
  async login(@Request() req) {
    return this.authService.login(req.user);
  }
}

auth.module.ts #

import { Module } from '@nestjs/common';
import { AuthService } from './auth.service';
import { AuthController } from './auth.controller';
import { UserModule } from './../../endpoints/user/user.module';
import { PassportModule } from '@nestjs/passport';
import { LocalStrategy } from './local.strategy';
import { JwtModule, JwtService } from '@nestjs/jwt';
import { UserService } from './../../endpoints/user/user.service';
import { LdapService } from './../ldap/ldap-service';
import { jwtConstants } from './constants';
import { JwtStrategy } from './jwt.strategy';

@Module({
  imports: [
    UserModule,
    PassportModule,
    JwtModule.register({
      secret: '2I*5f5OE9tlGIbg*3Q*C',
      signOptions: { expiresIn: '12h' },
    }),
  ],
  providers: [AuthService, LocalStrategy, LdapService],
  controllers: [AuthController],
  exports: [AuthService],
})
export class AuthModule {}

auth.service.ts #

import { Injectable } from '@nestjs/common';
import { LdapService } from '../ldap/ldap-service';
import { UserService } from './../../endpoints/user/user.service';
import { JwtService } from '@nestjs/jwt';

@Injectable()
export class AuthService {
  constructor(
    private readonly ldapService: LdapService,
    private readonly userService: UserService,
    private readonly jwtService: JwtService
  ) {}

  async validateUser(username: string, pass: string): Promise<any> {
    const authenticated = await this.ldapService.authenticateUser(
      username,
      pass,
    );

    if (authenticated === true) {
      console.log(authenticated, username, pass)
      return await this.userService.getUserById(username);
    }
    return null;
  }

  async login(user: any) {
    const payload = { ...user, sub: user.accountName };
    console.log(process.env.JWT_SECRET, payload);
    return {
      access_token: this.jwtService.sign(payload),
    };
  }
}

local.strategy.ts #

import { Strategy } from 'passport-local';
import { AuthGuard, PassportStrategy } from '@nestjs/passport';
import { Injectable, UnauthorizedException } from '@nestjs/common';
import { AuthService } from './auth.service';

@Injectable()
export class LocalStrategy extends PassportStrategy(Strategy) {
  constructor(private authService: AuthService) {
    super();
  }

  async validate(username: string, password: string): Promise<any> {
    const user = await this.authService.validateUser(username, password);
    if (!user) throw new UnauthorizedException();
    return user;
  }
}

@Injectable()
export class LocalAuthGuard extends AuthGuard('local') {}

排查解决方向 #

1. 补全JwtStrategy的注册 #

你引入了JwtStrategy但未将其添加到AuthModule的providers数组中，这可能导致JWT相关服务的配置链路异常。同时要确保JwtStrategy内部的密钥配置与JwtModule保持一致：

// jwt.strategy.ts 示例配置
import { Injectable } from '@nestjs/common';
import { PassportStrategy } from '@nestjs/passport';
import { ExtractJwt, Strategy } from 'passport-jwt';

@Injectable()
export class JwtStrategy extends PassportStrategy(Strategy) {
  constructor() {
    super({
      jwtFromRequest: ExtractJwt.fromAuthHeaderAsBearerToken(),
      ignoreExpiration: false,
      secretOrKey: '2I*5f5OE9tlGIbg*3Q*C', // 和JwtModule中的密钥一致
    });
  }

  async validate(payload: any) {
    return { userId: payload.sub, accountName: payload.accountName };
  }
}

然后在auth.module.ts的providers中添加JwtStrategy。

2. 检查模块导入关系 #

确认AppModule是否正确导入了AuthModule，如果AppController所在模块未导入AuthModule，会导致AuthService注入的JwtService是未配置的默认实例。

3. 调试JwtService配置 #

在AuthService的login方法中添加调试代码，查看JwtService的实际配置：

async login(user: any) {
  const payload = { ...user, sub: user.accountName };
  console.log('JwtService配置:', this.jwtService.getOptions()); // 打印当前配置
  console.log(process.env.JWT_SECRET, payload);
  return {
    access_token: this.jwtService.sign(payload),
  };
}

如果输出的配置中secret为空，说明JwtService未正确获取到JwtModule的配置，需检查模块的导入和服务提供逻辑。

4. 清理缓存重启服务 #

删除项目根目录下的dist文件夹，重启NestJS服务，避免旧缓存导致配置未更新。

内容的提问来源于stack exchange，提问作者Taylor Belk