Question

所以在我的项目中我使用两个登录系统。一个用于管理员，即用户和其他用户。已经在Passport的帮助下实现了Admin的登录系统。现在，当我使用相同的概念时，在那时的用户登录系统它不工作。我的意思是它影响我的管理员登录。我的代码是

passport.use(new LocalStrategy(
  function(username, password, done) {
    User.getUserByUsername(username, function(err, user){
        if(err) throw err;
        if(!user){
            return done(null, false, {message: 'Unknown User'});
        }
        User.comparePassword(password, user.password, function(err, isMatch){
            if(err) throw err;
            if(isMatch){
                return done(null, user);
            }else{
                return done(null, false, {message: 'Invalid Credential, please check carefully...!'})
            }
        });
    });
  }
));

passport.serializeUser(function(user, done) {
  done(null, user.id);
});

passport.deserializeUser(function(id, done) {
    User.getUserById(id, function(err, user) {
        done(err, user);
    });
});

router.post('/login',
  passport.authenticate('local', {
    failureRedirect: '/user/login',
    badRequestMessage: 'Field cannot be blank.!!', //missing credentials
    failureFlash: true
  }),
  function(req, res) {
    req.flash('success_msg', 'Welcome ' + req.user.name);
    res.redirect('/user/dashboard');
  });

我认为LocalStrategy会产生错误，因此我使用了basicStrategy，但之后我的管理员登录工作完全像以前一样但我的用户登录不起作用。每次它说Basic Realm =“Users”。任何帮助都会得到赞赏

Answer 1

实际上它不是本地或基本策略。它完全取决于passport.serializeUser和deserializeUser。我们必须在serializeUser上发送用户数据，而不是用户ID。在deserializeUser上，我们必须选择一些唯一性，然后根据条件运行查询。实际上，deserializeUser函数一次只能处理一个DB。

Answer 2

尝试以这种方式进行。它创建两个模式，一个为管理员，一个为用户。相应地，通过命名它们来创建两个本地策略，然后我们可以根据用户的凭据对用户进行序列化和反序列化。希望这会有所帮助：）

app.get("/register", function(req, res){
    res.render("reg")
})

app.post("/register", function(req, res){
    var type = req.body.type
    if(type=="student"){
    var newUser = new Student({
        username: req.body.username,
        gender: req.body.gender,
        rollnumber: req.body.rollnumber,
        dob: req.body.dob,
        email: req.body.email,
        type: req.body.type,
        password: req.body.password
    })

    req.checkBody('username','UserName is Required').notEmpty();
    req.checkBody('rollnumber','Roll Number is Required').notEmpty();
    req.checkBody('email','Email Required').notEmpty();
    req.checkBody('email','Email Invalid').isEmail();
    req.checkBody('password','Password is Required').notEmpty();
    req.checkBody('password1','Passwords do not match').equals(req.body.password);

    var errors = req.validationErrors();
    if(errors){
        res.render('Sregister', {errors: errors});
    }else{
    bcrypt.genSalt(10, function(err,  salt){
        bcrypt.hash(newUser.password, salt, function(err, hash){
            if(!err){
                newUser.password = hash;
            }
            newUser.save(function(err){
                if(!err){
                    console.log("success in reg");
                    res.redirect("/student/login")
                }
            })
        })
    })
    }}
    else if(type=="teacher"){
        var newUser = new Teacher({
        username: req.body.username,
        gender: req.body.gender,
        rollnumber: req.body.rollnumber,
        dob: req.body.dob,
        email: req.body.email,
        type: req.body.type,
        password: req.body.password
    })

    req.checkBody('username','UserName is Required').notEmpty();
    req.checkBody('rollnumber','Roll Number is Required').notEmpty();
    req.checkBody('email','Email Required').notEmpty();
    req.checkBody('email','Email Invalid').isEmail();
    req.checkBody('password','Password is Required').notEmpty();
    req.checkBody('password1','Passwords do not match').equals(req.body.password);

    var errors = req.validationErrors();
    if(errors){
        res.render('Sregister', {errors: errors});
    }else{

             bcrypt.genSalt(10, function(err,  salt){
                 bcrypt.hash(newUser.password, salt, function(err, hash){
                    if(!err){
                         newUser.password = hash;
                  }
                        newUser.save(function(err){
                     if(!err){
                         console.log("success in reg");
                         res.redirect("/teacher/login")
                }
            })
        })
    })
    }}
})

//strategies

passport.use('student', new LocalStrategy(function(username, password, done){
    var query = {username: username};
    Student.findOne(query, function(err, student){
        if(err) throw err;
        if(!student){
            return done(null, false);
        }
        bcrypt.compare(password,student.password, function(err, isMatch){
            if(err) throw err;
            if(isMatch)
                return done(null, student);
            else
                return done(null,false);
        })
    })
}))

passport.use('teacher', new LocalStrategy(function(username, password, done){
    var query = {username: username};
    Teacher.findOne(query, function(err, teacher){
        if(err) throw err;
        if(!teacher){
            console.log("no teach")
            return done(null, false);
        }
        bcrypt.compare(password,teacher.password, function(err, isMatch){
            if(err) throw err;
            if(isMatch)
                return done(null, teacher);
            else
                return done(null,false);
        })
    })
}))

//serialize deserizlize

passport.serializeUser(function (entity, done) {
    done(null, { id: entity.id, type: entity.type });
});

passport.deserializeUser(function (obj, done) {
    switch (obj.type) {
        case 'student':
            Student.findById(obj.id)
                .then(user => {
                    if (user) {
                        done(null, user);
                    }
                    else {
                        done(new Error('user id not found:' + obj.id, null));
                    }
                });
            break;
        case 'teacher':
            Teacher.findById(obj.id)
                .then(device => {
                    if (device) {
                        done(null, device);
                    } else {
                        done(new Error('device id not found:' + obj.id, null));
                    }
                });
            break;
        default:
            done(new Error('no entity type:', obj.type), null);
            break;
    }
});
//login routes

app.get("/student/login", function(req, res){
    res.render("slogin")
})

app.get("/teacher/login", function(req, res){
    res.render("tlogin")
})

app.post('/student/login', 
  passport.authenticate('student', { successRedirect: '/student/home', failureRedirect: '/student/login' }));

app.post('/teacher/login', 
  passport.authenticate('teacher', { successRedirect: '/teacher/home', failureRedirect: '/teacher/login' }));


app.get("/", function(req, res){
  res.render("home");  
})

app.get("/student/home", function(req, res){
  res.send("hi student")
})

app.get("/teacher/home", function(req, res){
  res.send("hi teacher")  
})

Passport LocalStrategy无法使用两个登录系统

2 个答案: