首次设置护照。 isAuthenticated() 总是返回 false

Question

我正在学习有关身份验证和安全的学习模块，我正在尝试获取护照运行，但我似乎遇到了麻烦。下面包含的代码都按您预期的方式工作，除了当用户从 /register post 路由重定向到 /secrets 路由时，尽管 .register() 已经工作（否则路由中的逻辑会将我重定向回 /register get 路由，而不是通过 secrets 路由的登录页面。

require("dotenv").config();
const express = require("express");
const bodyParser = require("body-parser");
const mongoose = require("mongoose");
const ejs = require("ejs");
const session = require("express-session");
const passport = require("passport");
const passportLocalMongoose = require("passport-local-mongoose");
const app = express();

app.use(bodyParser.urlencoded({ extended: true }));
app.use(bodyParser.json());
app.use(express.static("public"));
app.set("view engine", "ejs");

app.use(
 session({
   secret: "Our little secret.",
   resave: false,
   saveUninitialized: false
 })
);

app.use(passport.initialize());
app.use(passport.session());

mongoose.connect("mongodb://localhost:27017/userDB", { useNewUrlParser: true });
mongoose.set("useCreateIndex", true);

const userSchema = new mongoose.Schema({
 username: String,
 password: String
});

userSchema.plugin(passportLocalMongoose);

const Users = new mongoose.model("Users", userSchema);
passport.serializeUser(Users.serializeUser());
passport.deserializeUser(Users.deserializeUser());

app.listen(3000, (req, res) => {
 console.log("Listening on port 3000.");
});

app.get("/", (req, res) => {
 res.render("home");
});

app.get("/login", (req, res) => {
 res.render("login");
});

app.get("/register", (req, res) => {
 res.render("register");
});

app.get("/secrets", (req, res) => {
 console.log(req.isAuthenticated())
 if (req.isAuthenticated()) {
   res.render("secrets");
 } else {
   res.redirect("/login");
 }
});

app.post("/register", (req, res) => {
 console.log(req.body.username)
 console.log(req.body.password)
 Users.register(
   { username: req.body.username },
   req.body.password,
   (error, user) => {
     if (error) {
       console.log('there was an error: ', error);
       res.redirect("/register");
     } else {
       passport.authenticate("local")(req, res, () => {  //////////////not authenticating
         res.redirect("/secrets");
       });
     }
   }
 );
});

app.post("/login", (req, res) => {});

任何帮助弄清楚为什么 isAuthenticaed() 返回 false 的帮助将不胜感激。谢谢:)

Answer 1

您必须定义本地策略：

var passport = require('passport')
  , LocalStrategy = require('passport-local').Strategy;

passport.use(new LocalStrategy(
  function(username, password, done) {
    User.findOne({ username: username }, function (err, user) {
      if (err) { return done(err); }
      if (!user) {
        return done(null, false, { message: 'Incorrect username.' });
      }
      if (!user.validPassword(password)) {
        return done(null, false, { message: 'Incorrect password.' });
      }
      return done(null, user);
    });
  }
));

这里已经从数据库中查询了用户信息（例如Mongodb），如果响应成功则通过。

首次设置护照。 isAuthenticated() 总是返回 false

Setting up passport for the first time. isAuthenticated() always returning false

node.js

express

passport.js