Question

更新

我已将代码从护照local-signup内部移动到一个单独的处理程序，它运行正常。问题在于Passport和本地注册的使用，但我不知道为什么。

我使用Node.js（Express）+ Passport进行身份验证和注册。这是一个标准的程序使用它之前它似乎不起作用。护照注册立即进入failureRedirect。主要问题是代码没有命中任何console.log（）语句，因此我认为它甚至不处理第一个请求并自动失败。知道为什么或如何调试？

cmd log：

POST /register 302 4ms - 58b
GET / 304 2ms
GET /css/bootstrap.css 304 1ms
GET /css/main.css 304 1ms
GET /javascript/chart.js 304 2ms
GET /javascript/bootstrap.js 304 2ms
GET /javascript/index.js 304 2ms

index.html表单：

 <form class="form-register" name="register-form" method="post" action="/register" data-name="register Form" enctype="application/x-www-form-urlencoded">
     <div class="ARegistration" style="display:none;">
         <input type="email" id="txtOnceEmail" class="form-control" style="width:300px; display:block;" placeholder="One use Email Address" name="AEmail">
           <br />

         <input type="text" id="txtCodeName" class="form-control" style="width: 200px; display:block;" placeholder="Code Name" name="CodeName">
           <br />

         <input type="number" id="txtSecretCodeLength" value="10" class="form-control" style="width: 200px; display:block;" placeholder="Secret Code Length" name="SecretCodeLength">
           <br />

         <textarea id="txtaXInfo" class="form-control" placeholder="Any info" name="aXInfo"></textarea>

         <button class="btn btn-info btn-xs">Register</button>
      </div>
  </form>

路线：

    app.post('/register', passport.authenticate('local-signup', {
        successRedirect : '/', // redirect to the secure profile section
        failureRedirect : '/', // redirect back to the signup page if there is an error
        failureFlash : true // allow flash messages
    }));

护照本地注册：

// =========================================================================
// LOCAL SIGNUP ============================================================
// =========================================================================
passport.use('local-signup', new LocalStrategy({
    // by default, local strategy uses username and password, we will override with email
    usernameField: 'email',
    passwordField: 'password',
    passReqToCallback: true // allows us to pass in the req from our route (lets us check if a user is logged in or not)
},
function (req, email, password, done) {
    // asynchronous
    process.nextTick(function () {
        // check if the user is already logged in
        if (!req.user) {
            console.log("step1");
            User.findOne({ $or: [{ 'valid.email': email }, { 'emailList': email }] }, function (err, user) {
                // if there are any errors, return the error
                if (err)
                    return done(err);

                // check to see if theres already a user with that email
                if (user) {
                    console.log("step2");
                    return done(null, false, req.flash('signupMessage', 'That email is already taken.'));
                } else {

                        console.log("step5");
                        newUser.anonym.CodeName = req.body.CodeName;
                        newUser.anonym.extraInfo = req.body.aXInfo;
                        newUser.emailList.push(req.body.AEmail);

                        //Generate random string
                        var rString = null;
                        var goOn = false;

                        while (!goOn)
                        {
                            console.log("step6");
                            rString = randomString(req.body.SecretCodeLength, charSet);
                            User.findOne({ 'emailList': rString }, function (err, user) {
                                // if there are any errors, return the error
                                if (err){
                                    console.log(err);
                                    return done(err);}

                                // check to see if theres already a user with that email
                                if (!user) {
                                    goOn = true;
                                }
                            });
                        }
                        console.log("step7");
                        newUser.anonym.secretCode = rString;
                        rString = null;

                        newUser.save(function (err) {
                            if (err)
                                throw err;
                            return done(null, newUser);
                        });
                    }
                // }
            });
        } else {
            console.log('test5');
        }
    });

}));

使用angular.js测试它也可以执行帖子，但问题仍然存在。这绝对是护照的一部分。

Answer 1

问题在于：

passport.use('local-signup', new LocalStrategy({
// by default, local strategy uses username and password, we will override with email
usernameField: 'email',
passwordField: 'password',
passReqToCallback: true // allows us to pass in the req from our route (lets us check if a user is logged in or not)

}，

如果未提供email或password，护照会自动失败。我想有些文档可能会有用！。

Answer 2

如果您未在新usernameField中标识LocalStrategy，则默认情况下会将用户名保存在username中，如here所述。

此策略在函数之前采用可选的选项哈希，例如new LocalStrategy({/* options */, callback})。

可用选项包括：

usernameField - 可选，默认为username
passwordField - 可选，默认为password

这两个字段定义POST主体中发送到服务器的属性的名称。

Express.js Passport身份验证自动失败跳过策略

2 个答案: