使用 node.js 和 pgAdmin。我已經為服務器、會話、cookies 等設定了所有必要的代碼。我得到的錯誤是“型別錯誤：無法讀取未定義的屬性‘用戶名’”。會話在從一個頁面重定向到另一個頁面后不會持續存在。具體從loginregister頁面到orderform。重定向后如何讓會話保持不變？任何幫助將不勝感激，謝謝！
const LocalStrategy = require("passport-local").Strategy;
const { pool } = require('./dbConfig');
const bcrypt = require('bcryptjs');
function initialize (passport) {
const authenticateUser = (username, password, done) => {
pool.query(
`SELECT * FROM credentials WHERE username = $1`,
[username], (err, results) => {
if(err) {
throw err;
}
if(results.rows.length === 1) {
const user = results.rows[0];
bcrypt.compare(password, user.password, (err, isMatch) => {
if(err){
throw err
}
if(isMatch){
return done(null, user);
}
else {
return done(null, false, {message: "Incorrect password"});
}
})
}
else {
return done(null, false, {message: "Account does not exist"});
}
}
);
}
passport.use('user-local', new LocalStrategy({
usernameField: "username",
passwordField: "password"
}, authenticateUser));
passport.serializeUser(function (user, done)
{
done(null, user.user_id);
});
passport.deserializeUser(function (id, done) { console.log("---------------------------------------------");
pool.query(
`SELECT * FROM credentials WHERE user_id = $1`,
[id],
(err, results) => {
if(err) {
throw err;
}
return done(null, results.rows[0]);
}
)
});
const authenticateEmp = (username, password, done)=>{
pool.query(
`SELECT * FROM employee WHERE username = $1`,
[username], (err, results) => {
if(err) {
throw err;
}
if(results.rows.length == 1) {
const user = results.rows[0];
bcrypt.compare(password, user.password, (err, isMatch) => {
if(err){
throw err
}
if(isMatch){
return done(null, user);
}
else {
return done(null, false, {message: "Incorrect password"});
}
});
}
else {
return done(null, false, {message: "Account does not exist"});
}
}
);
}
passport.use('emp-local', new LocalStrategy({//Create admin controler
usernameField: "username",
passwordField: "password"
}, authenticateEmp));
passport.serializeUser((user, done) => done(null, user.user_id));
passport.deserializeUser((id, done) => {
pool.query(
`SELECT * FROM employee WHERE emp_id = $1`,
[id],
(err, results) => {
if(err) {
throw err;
}
return done(null, results.rows[0]);
}
);
});
}
module.exports = initialize;
userRouter.get("/loginregister", (req, res) => {
res.render("../views/loginRegister");
});
userRouter.get("/orderform", (req, res) => {
console.log(req.user);
res.send(`Hello ${req.user.username}. Your session ID is ${req.sessionID}
and your session expires in ${req.session.cookie.maxAge}
milliseconds.<br><br>
<a href="/logout">Log Out</a><br><br>
<a href="/secret">Members Only</a>`);
//res.render("../views/orderForm");
});
function loginController (req, res, next) {
passport.authenticate('user-local', function(err, user, info) {
if (err) { return next(err); }
if (!user) { return res.redirect('/loginregister'); } // Can attach flash message here and personalize req.body.email
req.logIn(user, function(err) {
if (err) { return next(err); }
console.log(req.sessionID);
return res.redirect('/user/orderform');
});
})(req, res, next);
};
const { name } = require("ejs");
const express = require("express");
const app = express();
const path = require('path');
const parseurl = require('parseurl')
const session = require("express-session");
const flash = require("express-flash");
const uid = require('uid-safe');
const assert = require('assert');
const pgStore = require('connect-pg-simple')(session);
const router = require('../views/routes');
const passport = require('passport');
const { pool } = require('./dbConfig');
const passportConfig = require("./passportConfig");
const PORT = process.env.PORT || 4000;
app.set('view engine', 'ejs');
app.use(express.urlencoded({ extended: false }));
uid(18, function (err, val) {
if (err) return done(err)
assert.strictEqual(Buffer.byteLength(val), 24);
})
app.use(session({
genid: function(req) {
return uid(18) // use UUIDs for session IDs
},
secret: process.env.SECRET_KEY,
resave: 'false',
saveUninitialized: 'false',
cookie: {
secure: false,
maxAge: 24 * 60 * 60 * 1000 // One day
},
store: new pgStore({
pool : pool, // Connection pool
tableName : process.env.TABLE_NAME
// Insert connect-pg-simple options here
})
}));
if (app.get("env") === "production") {
// Serve secure cookies, requires HTTPS
session.Cookie.secure = true;
}
app.use(flash());
passportConfig(passport);
app.use(passport.initialize());
app.use(passport.session());
app.use(express.json());
app.use ('/', router);
app.use(express.static(path.resolve(__dirname, './css')));
app.listen(PORT, () => {
console.log(`Server running on port ${PORT}`);
});
uj5u.com熱心網友回復：
要除錯為什么沒有獲得會話 cookie，請將現有的會話中間件替換為：
app.use(session({
secret: 'keyboard cat',
}));
驗證您的會話 cookie 是否適用。然后，如果是這樣，開始一次添加一個會話選項，直到找到導致事情停止作業的選項。
其他一些注意事項。
您對 express-session 的 uid 實作沒有正確實作。
首先，express-session 內置了自己的 uid 生成器。除非您有某些特定的獨特要求，內置生成器無法滿足您的需求，否則您無需自己提供。
根據uid-safe的檔案，同步 UID 是通過以下方式生成的：
uid.sync(18)
不是，您正在使用的只是uid(18).那只是回傳一個對唯一 id 不起作用的承諾物件。
所以這：
genid: function(req) {
return uid(18);
},
應該是這樣的：
genid: function(req) {
return uid.sync(18);
},
或者，只需將 uid 生成留給 express-session 自行完成。
哦，這是一個有趣的事實， express-session 中的默認實作已經使用uid-safe.
轉載請註明出處，本文鏈接：https://www.uj5u.com/yidong/404499.html
標籤：