如何在同一个应用中调用多个 passport-jwt 策略

Question

我能够区分这两条路线并且验证第一条路线（学生）。当我调用第二条路线（老师）进行身份验证时，返回一个空的 JSON 文件。

在 users.js 'passportStudent.authenticate' 中工作并且 returns 一个包含预期用户信息的 JSON 文件，但我不确定为什么 'passportTeacher.authenticate' returns 一个空的 JSON 文件。

这是我的代码：

users.js:

const passportStudent = require('passport');
const passportTeacher = require('passport');

/*Some code here*/

router.get('/profile/student', passportStudent.authenticate('student', {session: false}), (req, res, next) =>{
    res.json({user : req.user});
});

router.get('/profile/teacher', passportTeacher.authenticate('teacher', {session: false}), (req, res, next) =>{
    res.json({teacher : req.teacher});
});

passport.js:

    const JwtStrategy = require('passport-jwt').Strategy;
    const ExtractJwt = require('passport-jwt').ExtractJwt;
    const User = require('../models/user');
    const Teacher = require('../models/teacher');
    const config = require('../config/database');

    module.exports = function(passport){
        let opts = {};
        opts.jwtFromRequest = ExtractJwt.fromAuthHeaderWithScheme('jwt');
        opts.secretOrKey = config.secret;
        passport.use('student', new JwtStrategy(opts, (jwt_payload, done)  => {
            console.log(jwt_payload);
            User.getUserById(jwt_payload.data._id, (err, user) => {
                if(err){
                    return done(err, false);
                }
                if(user){
                    return done(null, user);
                }
                else{
                    return done(null, false);
                }
            });
        }));

        passport.use('teacher', new JwtStrategy(opts, (jwt_payload2, done)  => {
            console.log(jwt_payload2);
            Teacher.getTeacherById(jwt_payload2.data._id, (err, teacher) => {
                if(err){
                    return done(err, false);
                }
                if(teacher){
                    return done(null, teacher);
                }
                else{
                    return done(null, false);
                }
            });
        }));
    }

app.js 护照代码：

const passportStudent = require('passport');
const passportTeacher = require('passport');

/*Some code here*/

app.use(passportStudent.initialize());
app.use(passportStudent.session());

app.use(passportTeacher.initialize());
app.use(passportTeacher.session());

require('./config/passport')(passportStudent);
require('./config/passport')(passportTeacher);

如何在所需的路由上进行身份验证？或者我应该为学生选择本地策略，为老师选择智威汤逊？

感谢您的帮助。

Answer 1

在这两种情况下，passport 都将签名用户信息存储在 req.user 中。

因此您需要将教师路由器更新为

router.get('/profile/teacher', passportTeacher.authenticate('teacher', {session: false}), (req, res, next) =>{
    res.json({teacher : req.user});
});

这里我改

res.json({teacher : req.teacher});

到

res.json({teacher : req.user});

如何在同一个应用中调用多个 passport-jwt 策略

How to call multiple passport-jwt strategies in the same app

node.js

express

passport.js