使用Google reCaptcha进行护照身份验证

Question

我正在尝试将google reCaptcha合并到我的注册表单的后端，该后端已经具有护照身份验证，代码如下所示：

    app.get('/signup', function(req, res) {
        // render the page and pass in any flash data if it exists
        res.render('signup.ejs', { 
            message : req.flash('signupMessage')
        });
    });

    app.post('/signup', passport.authenticate('local-signup', {
        successRedirect : '/app', // redirect to the secure chat section
        failureRedirect : '/signup', // redirect back to the signup page if there is an error
        failureFlash : true // allow flash messages
    }));

这是我的Google recaptha代码：

    app.get('/signup', recaptcha.middleware.render, function(req, res) {
        // render the page and pass in any flash data if it exists
        res.render('signup.ejs', { 
            message : req.flash('signupMessage'),
            captcha : req.recaptcha
        });
    });

   app.post('/signup', recaptcha.middleware.verify, function(req, res){
        if (!req.recaptcha.error) {
            //if recaptcha is correct do somthing
        }else {
            req.flash('signupMessage','reCAPTCHA Incorrect');
            res.redirect('/signup');
        }
    });

两者都是独立工作的，但是当我像这样组合它们时：

    app.get('/signup', isNotLoggedIn, recaptcha.middleware.render, function(req, res) {
        // render the page and pass in any flash data if it exists
        res.render('signup.ejs', { 
            message : req.flash('signupMessage'),
            captcha : req.recaptcha
        });
    });

    app.post('/signup', recaptcha.middleware.verify, function(req, res){
        if (!req.recaptcha.error) {
            passport.authenticate('local-signup', {
                successRedirect : '/app', 
                failureRedirect : '/signup',
                failureFlash : true
            });
        }else {
            req.flash('signupMessage','reCAPTCHA Incorrect');
            res.redirect('/signup');
        }
    });

或这个：

    app.get('/signup', isNotLoggedIn, recaptcha.middleware.render, function(req, res) {
        // render the page and pass in any flash data if it exists
        res.render('signup.ejs', { 
            message : req.flash('signupMessage'),
            captcha : req.recaptcha
        });
    });

    app.post('/signup', recaptcha.middleware.verify, function(req, res){
        if (req.recaptcha.error) {
            req.flash('signupMessage','reCAPTCHA Incorrect');
            res.redirect('/signup');
        }
    },
    passport.authenticate('local-signup', {
        successRedirect : '/app', // redirect to the secure chat section
        failureRedirect : '/signup', // redirect back to the signup page if there is an error
        failureFlash : true // allow flash messages
    }));

该页面保持加载状态，没有任何反应。

Answer 1

所以我想通了！

诀窍在于使用next（）;。 如果验证码是正确的，则该函数可以使代码最终如下所示：

    app.get('/signup', isNotLoggedIn, recaptcha.middleware.render, function(req, res) {
        // render the page and pass in any flash data if it exists
        res.render('signup.ejs', { 
            message : req.flash('signupMessage'),
            captcha : req.recaptcha
        });
    });

    app.post('/signup', recaptcha.middleware.verify, captchaVerification, passport.authenticate('local-signup', {
        successRedirect : '/app', // redirect to the secure chat section
        failureRedirect : '/signup', // redirect back to the signup page if there is an error
        failureFlash : true // allow flash messages
    }));

function captchaVerification(req, res, next) {
    if (req.recaptcha.error) {
        req.flash('signupMessage','reCAPTCHA Incorrect');
        res.redirect('/signup');
    } else {
        return next();
    }
}

那就是您如何将Google验证码集成到NodeJS，Express，Passport，后端