Node.js 护照认证忽略控制器功能

Question

If passport returns 用户 { status: 200 }:

passport.js

...
return done(null, rows[0], { status: 200 });
...

我希望调用控制器 'controllerLogin.login'：

routs/index.js

const express = require('express');
const passport = require('passport');
const passportConf = require('../passport');
const controllerLogin = require('../controllers/login');
...

router.route('/v1/login')
    .post( function(req, res, next) {

        passport.authenticate('local-login', function (err, user, context = {}) {
            if (err) {
                console.log(err);
            }
            if (context.status === 429) {
                return res.status(429).send({ status: 429, success: false })
            }
            if (context.status === 401){
                return res.status(401).send({ status: 401, success: false })
            }
            next();
            //return;

        })(req, res, next);

}, controllerLogin.login );

但我无法连接到控制器 'controllerLogin.login'。我缺少什么以及如何执行 'controllerLogin.login'?

下面是工作，但我需要更高版本。

const passLogin = passport.authenticate('local-login', { session: false, failWithError: true });

router.route('/v1/login')
    .post( passLogin, function(err, req, res, next) {
        return res.status(401).send({ status: 401, success: false })
}, controllerLogin.login );

编辑：有效的方法...

router.route('/v1/login')
    .post( function(req, res, next) {

        passport.authenticate('local-login', { session: false, failWithError: false }, function (err, user, context = {}) {
            if (err) {
                console.log(err);
            }
            if (context.statusCode === 429) {
                return res.status(429).send({ status: 429, success: false, message: { name: 'Rate Limit Error' } })
            }
            if (context.statusCode === 401){
                return res.status(401).send({ status: 401, success: false, message: { name: 'Authentication Error' } })
            }

            // this works getting user information
            console.log('user:');
            console.log(user);

            next();

        })(req, res, next);

}, /*controllerLogin.login*/ (req, res) => { res.status(200).json({just: 'testing'})} );

controller/login.js

module.exports = {
    login: async (req, res, next) => {

        // Can't access user information via 'req.user' anymore 
        console.log('req.user:');
        console.log(req.user);  

        /* .. How to access user information here?  .. */

        res.status(200).json({just: 'testing'})

  }
}

Answer 1

听起来 controllerLogin.login 想要 req.user，但尚未设置。因此，请尝试在传递给 passport 的 authenticate 函数的回调中手动执行此操作。

router.route('/v1/login')
    .post( function(req, res, next) {

        passport.authenticate('local-login', { session: false, failWithError: false }, function (err, user, context = {}) {
            if (err) {
                console.log(err);
                return next(err); // might want to add this line to handle errors?
            }
            if (context.statusCode === 429) {
                return res.status(429).send({ status: 429, success: false, message: { name: 'Rate Limit Error' } })
            }
            if (context.statusCode === 401){
                return res.status(401).send({ status: 401, success: false, message: { name: 'Authentication Error' } })
            }
            if(!user) {
                // might want to handle this separately? user not found?
                //return next('User not found');
            }

            // this works getting user information
            console.log('user:');
            console.log(user);

            req.user = user;
            next(); // this moves us on to controllerLogin.login

        })(req, res, next);

}, controllerLogin.login);

然后在controller/login

module.exports = {
    login: (req, res) => {
        // remove user logging once this works, don't want to log sensitive info (!)
        console.log('req.user in controller/login:')
        console.log(req.user)

        // user logic here

        res.status(200).json({status: 200, success: true})
  }
}

"Custom Callback" 部分下的 passportjs docs 值得一看。该示例不会像您正在做的那样传递给另一个函数，但它可以帮助您了解另一种方法。

Node.js 护照认证忽略控制器功能

Node.js passport authentication ignores controller function

javascript

node.js

passport.js