在 Passport.js 中獲取當前用戶

Question

我有以下 Express.js 文件

var express = require('express');
var favicon = require('serve-favicon');
var morgan = require('morgan');
var compression = require('compression');
var bodyParser = require('body-parser');
var methodOverride = require('method-override');
var cookieParser = require('cookie-parser');
var errorHandler = require('errorhandler');
var path = require('path');
var config = require('./environment');
var passport = require('passport');

module.exports = function(app) {
    var env = app.get('env');

    app.set('views', config.root + '/server/views');
    app.engine('html', require('ejs').renderFile);
    app.set('view engine', 'html');
    app.use(compression());
    app.use(bodyParser.urlencoded({
        extended: false
    }));
    app.use(bodyParser.json());
    app.use(methodOverride());
    app.use(cookieParser());
    app.use(passport.initialize());
    app.use(passport.session()); // passport session middleware 
    if ('production' === env) {
        app.use(favicon(path.join(config.root, 'public', 'favicon.ico')));
        app.use(express.static(path.join(config.root, 'public')));
        app.set('appPath', config.root + '/public');
        app.use(morgan('dev'));
    }

    if ('development' === env || 'test' === env) {
        app.use(require('connect-livereload')());
        app.use(express.static(path.join(config.root, '.tmp')));
        app.use(express.static(path.join(config.root, 'client')));
        app.set('appPath', 'client');
        app.use(morgan('dev'));
        app.use(errorHandler()); // Error handler - has to be last
    }
};

用戶使用 Facebook 登錄后，在我的 controller 中，當我嘗試執行req.user或req.session.passport.user時，得到undefined 。

如何獲取當前登錄的用戶？

Answer 1

身份驗證成功后， req.user會自動設置為該用戶

var express               = require("express"),
app                   = express(),
bodyParser            = require("body-parser"),
mongoose               = require("mongoose"),
passport              = require("passport"),
flash                 = require("connect-flash"),
localStrategy         = require("passport-local"),
User                  = require("./models/user"),
passportLocalMongoose = require("passport-local-mongoose")


app.use(require("express-session")({
secret: "demoapp",
resave: false,
saveUninitialized: false
}));

app.use(passport.initialize());
app.use(passport.session());

passport.use(new localStrategy(User.authenticate()));
passport.serializeUser(User.serializeUser());
passport.deserializeUser(User.deserializeUser());

app.use(bodyParser.urlencoded({extended: true}));

app.set("view engine", "ejs")
app.use(express.static(__dirname + "/public"));
app.use(express.static(__dirname + "/dashboard"));

獲取當前用戶的詳細信息。 您可以將currentUser設置為您自己的文本

app.use(function(req,res,next){
  res.locals.currentUser = req.user;
  next();
})

如果使用ejs，則在瀏覽器中顯示用戶個人資料

<p> <%= currentUser.username %> </p>
<p> <%= currentUser.country %> </p>

Answer 2

您需要定義身份驗證策略，並調用passport.authenticate來對用戶進行身份驗證。 查看護照指南中的示例

Answer 3

使用 Next.js 的解決方案：

奇怪的是， -> 解決方案 <-來自next-connect 的 README 中最近刪除的部分，但它可以正常工作。 如果您使用的是純 JS，則可以忽略 typescript 部分。

關鍵部分是 ./src/pages/index 中的getServerSideProps ./src/pages/index （或您想要獲取用戶 object 的任何文件）。

// —> ./src/authMiddleware.ts
// You'll need your session, initialised passport and passport with the session,
// so here's an example of how we've got ours setup, yours may be different

//
// Create the Passport middleware for SAML auth.
//
export const ppinit = passport.initialize();

//
// Set up Passport to work with expressjs sessions.
//
export const ppsession = passport.session();

//
// Set up expressjs session handling middleware
//
export const sess = session({
  secret: process.env.sessionSecret as string,
  resave: true,
  saveUninitialized: true,
  store: sessionStore,
});

// —> ./src/pages/index.ts

// update your user interface to match yours
export interface User {
  id: string;
  name: string;
}

interface ExtendedReq extends NextApiRequest {
  user: User;
}

interface ServerProps {
  req: ExtendedReq;
  res: NextApiResponse;
}

interface ServerPropsReturn {
  user?: User;
}

export async function getServerSideProps({ req, res }: ServerProps) {
  const middleware = nc()
    .use(sess, ppinit, ppsession)
    .get((req: Express.Request, res: NextApiResponse, next) => {
      next();
    });

  try {
    await middleware.run(req, res);
  } catch (e) {
    // handle the error
  }

  const props: ServerPropsReturn = {};
  if (req.user) props.user = req.user;
  return { props };
}

interface Props {
  user?: User;
}

//
// A trivial Home page - it should show minimal info if the user is not authenticated.
//
export default function Home({ user }: Props) {
  return (
    <>
      <Head>
        <title>My app</title>
        <link rel="icon" href="/favicon.ico" />
      </Head>

      <main>
        <h1>Welcome to My App {user?.name}</h1>
      </main>
    </>
  );
}