节点和护照身份验证，从客户端到服务器的挂起请求

Question

我刚刚在我的项目中包含了 Passport js 以进行身份验证。但是现在我的 POST 创建新用户的请求挂起并且 return 在我关闭服务器后在客户端上显示 "Not authorized" 的警报。我的旧代码（没有 Passport）仍然有效，所以我认为这不是从客户端到服务器的代理问题

我看到的最后一个控制台日志是用户API、console.log('received request ', req.body)

的第一次登录

没有记录错误消息，除非我停止服务器时我会得到

"Proxy error: Could not proxy request /api/user from localhost:3000 to http://localhost:5000/. [1] See https://nodejs.org/api/errors.html#errors_common_system_errors for more information (ECONNRESET).

///app.js (server)

const express = require("express");
const bodyParser = require("body-parser");
const cors = require('cors');
const mongoose = require("mongoose");
const routes = require("./routes"); //Used to end with /api
const path = require("path");
require("dotenv").config();

const passport = require('passport');

const app = express();

const port = process.env.PORT || 5000;

//database
mongoose
  .connect(process.env.DB, { useNewUrlParser: true, useUnifiedTopology: true })
  .then(() => console.log("Database connected successfully"))
  .catch((err) => console.log(err));

mongoose.Promise = global.Promise;

app.use((req, res, next) => {
  res.header("Access-Control-Allow-Origin", "*");
  res.header(
    "Access-Control-Allow-Headers",
    "Origin, X-Requested-With, Content-Type, Accept"
  );
  next();
});

require('./config/passport');

app.use(cors());
app.use(bodyParser.json());
app.use(passport.initialize());

app.use("/", routes); //Load API - this folder has an index.js file

app.use((err, req, res, next) => {
  console.log("$!$", err);
  next();
});

app.listen(port, () => {
  console.log(`Server running on port ${port}`);
});

///users.js (API for User model)

const passport = require('passport');
const express = require("express");
const router = express.Router();
const User = require("../models/User");

//Old - This works, which makes me think the issue is with Passport js
// router.post("/user", (req, res, next) => {
//   try {
//     User.create(req.body)
//       .then((data) => res.json(data))
//       .catch(next);
//   } catch {
//     res.json({
//       error: "Failed to upload new user",
//     });
//   }
// });
//New
router.post("/user", (req, res, next) => {
  console.log('received request ', req.body);
  passport.authenticate('register', (err, hashedPassword, info) => {
    if (err) {
      console.log("Passport err on register ", err);
    }
    else if (info != undefined) {
      console.log("Defined err ", info.message);
      res.send(info.message);
    } else {
      req.login(user, err => {
        const newUser = {
          firstName: req.body.firstName,
          lastName: req.body.lastName,
          email: req.body.email,
          password: hashedPassword,
        };
        User.create(newUser)
          .then((data) => res.json(data))
          .catch(next);
      });
    }
  });
});

//passport.js (for auth)

const bcrypt = require('bcrypt');

const BCRYPT_SALT_ROUNDS = 12;

const passport = require('passport'),
      localStrategy = require('passport-local').Strategy,
      User = require('../models/User'),
      JWTstrategy = require('passport-jwt').Strategy,
      ExtractJWT = require('passport-jwt').ExtractJwt;

const opts = {
  jwtFromRequest: ExtractJWT.fromAuthHeaderWithScheme('JWT'),
  secretOrKey: 'secret key',
};

passport.use(
  'register',
  new localStrategy(
    {
      usernameField: 'email',
      passwordField: 'password',
    },
    (email, password, done) => {
      try {
        console.log('searching for User');
        User.findOne({ email })
          .then(user => {
          if (user != null) {
            console.log('email already taken');
            return done(null, false, { message: 'email already in use' });
          } else {
            console.log('email is available');
            bcrypt.hash(password, BCRYPT_SALT_ROUNDS).then(hashedPassword => {
              console.log('hashed password created for new user');
              return done(null, hashedPassword, null);
            });
          }
        })
      } catch(err) {
        done(err);
      }
    }
  )
)

Answer 1

passport.authenticate 在您的代码中没有用作 中间件 ，而是像请求中内部调用的常规函数一样处理程序。从 passport documentation 开始，您应该 在以这种方式使用时调用 返回函数，如下所示：

  passport.authenticate('register', (err, hashedPassword, info) => {
     // ...
  })(req, res, next); // <- ADD ARGUMENTS AND CALL

节点和护照身份验证，从客户端到服务器的挂起请求

Node and Passport auth, hanging request from client to server

javascript

node.js

express

passport.js