带有护照的Express NodeJS服务器中的sureAdmin问题

Question

I know there's the following function:

  function ensureAdmin(req, res, next) {
    if (req.user && req.user.username === "admin") {
      return next();
    } else {
      res.send("You do not have access to this web page. Please, contact to the system administrator.");
    }

in order to ensure a page is only accessed by the admin. However, I don't find anywhere how to become a user to admin. I don't know if it is worthwhile to know, but I am using MongoDB.

Answer 1

Your middleware is checking a user's username to see if it is an admin.

If you want to create an admin user, in this case, you'll want to create a user whose username is 'admin' -- that user, and only that user, will be able to access any of the ensureAdmin protected routes.