使用postgresSQL設置護照本地策略

Question

我在使用服務器設置護照認證時遇到問題。 我以前使用過passwordjs，但是在mongodb中使用過。 我目前正在嘗試使用postgressql設置本地策略，但是沒有運氣。 當使用passport.authenticate（）進入登錄POST路由時，我沒有收到向我發送的cookie。 我不確定是否可以使用passwordJS和通過Heroku托管的postgres數據庫正確設置服務器。

require('dotenv').config(); //In order to gain access to our .env file
//process.env.YELP_API_KEY
const express = require("express");
const app = express();
const bodyParser = require("body-parser");
app.use(bodyParser.json()); //This is going to allow us to access data stored in 'body' when making a post or put request
app.use(bodyParser.urlencoded({extended: true}));
const { Pool } = require('pg');
const fs = require("fs"); //This is needed to convert sql files into a string
let port = process.env.PORT || 5000;

//session-related libraries
const session = require("express-session");
const passport = require("passport"); //This is used for authentication
const LocalStrategy = require("passport-local").Strategy;
const bcrypt = require("bcrypt");


//Setting up our session
app.use(session({
    secret: process.env.SECRET,
    resave: false,
    saveUninitialized: false
}));


//Connection to database
const pool = new Pool({
    connectionString: process.env.DATABASE_URL,
    ssl: true
}); //This is used to connect to our remote postegres database hosted via Heroku


//initializing our session
app.use(passport.initialize());
app.use(passport.session()); //Telling our app to use passport for dealing with our sessions


//setting up our local strategy
passport.use('local', new LocalStrategy({passReqToCallBack: true},( username, password, cb )=> {
    console.log("this is being executed");
    pool.query("SELECT id, username, password from users where username=$1", [username], (err, result) => {
        if(err){
            return cb(err);

        }
        if(result.rows.length > 0){
            const first = result.rows[0];
            bcrypt.compare(password, first.password, (err, res) => {
                if(res){
                    cb(null, {
                        id: first.id,
                        user: first.username
                    })
                }
                else {
                    cb(null, false);
                }
            })
        }
        else {
            cb(null, false);
        }
    })
}));



passport.serializeUser(function(user, done){
    console.log("serialize user is executing")
    done(null, user.id);
})

passport.deserializeUser(function(id, done){
    pool.query('SELECT id, username FROM users WHERE id = $1', [parseInt(id, 10)], (err, results) => {
        if(err) {
          return done(err)
        }

        done(null, results.rows[0])
      });
});


app.post("/api/login", (req, res) => {
    passport.authenticate('local', function(err, user, info){
        console.log(user);
    });
})



app.listen(port, function(){
    console.log("Your app is running on port " + port);
});

預期結果：用戶應該能夠使用發布路徑“ / api / login”登錄，但是passport.authenticate無法正常工作？ 護照本地策略也應正確設置。

Answer 1

在您的路線app.post("/api/login", .... passport.authenticate需要訪問req和res 。

有多種方法可以使它起作用。

app.post("/api/login", (req, res) => {
    passport.authenticate('local', function(err, user, info){
        console.log(user);
        // make sure to respond to the request
        res.send(user);
    })(req, res); // <= pass req and res to the passport
})

// or
// use it as a middleware
app.post("/api/login", passport.authenticate('local'), (req, res) => {
    console.log(req.user);
    // make sure to respond to the request
    res.send(req.user);
})