Question

我正在尝试使用Node，Express，Express-Session和Passport.js实现简单的身份验证。作为存储中间件，我在项目中使用pg-promise时，使用的是connect-pg-simple。

我设法将护照配置为可以与路由器一起使用，但是由于某些原因，会话不会保存到我的数据库中。没有任何一个插件返回任何错误，一切似乎都运行顺利，但是我的会话表为空。

我可能做错了什么？ connect-pg-simple连接到服务器，passport.js正在举行会话，express-session将已配置的maxAge分配给cookie。

server.js

const express = require('express');
const db = require('./database.js');
const cors = require('cors');
const helmet = require('helmet');
const session = require('express-session');
const passport = require('passport');

const port = process.env.PORT || 3000;
const app = express();

const pgSession = require('connect-pg-simple')(session);
const pgStoreConfig = {
  pgPromise: db.conn
};

app.set('trust proxy', 1);

app.use(express.json());
app.use(express.urlencoded({ extended: true }));

app.use(
  session({
    secret: REDACTED, // need to change it later to some proper hash
    store: new pgSession(pgStoreConfig),
    resave: true,
    cookie: {
      maxAge: 30 * 24 * 60 * 60 * 1000, // 30 days ;)
      secure: app.get('env') === 'production'
    },
    saveUninitialized: false
  })
);

app.use(passport.initialize());
app.use(passport.session());

app.use(cors());
app.use(helmet());

app.get('/', (req, res) => {
  if (req.session.views) {
    req.session.views++;
  } else {
    req.session.views = 1;
  }
  //res.send(`Views: ${req.session.views}`);
  res.json(req.session);
});

const userRouter = require('./routes/user.js');

app.use(userRouter);

config / passport.js

const passport = require('passport');
const local = require('passport-local');
const db = require('../database.js');
const statements = require('../routes/statements/user.js');
const cryptoUtils = require('../utils/crypto.js');

passport.serializeUser((user, done) => {
  done(null, user.id);
});

passport.deserializeUser(async (id, done) => {
  try {
    let result = await db.conn.one(statements.getUserByIdStatement, [id]);
    done(null, result);
  } catch (error) {
    console.log(`Error while deserializing user: ${error}`);
    return done(error);
  }
});

passport.use(
  new local.Strategy(
    { usernameField: 'email', passwordField: 'password' },
    async (username, password, done) => {
      try {
        let user = await db.conn.one(statements.loginUserStatement, [username]);

        if (user == null) {
          console.log(`Couldn't find user!`);
          return done(null, false);
        } else {
          let passwordCheck = cryptoUtils.comparePasswords(
            password,
            user.password,
            user.salt
          );

          if (passwordCheck) {
            delete user.password;
            delete user.salt;
            console.log(`Successfuly logged in!`);
            return done(null, user);
          } else {
            console.log(`Wrong password!`);
            return done(null, false);
          }
        }
      } catch (error) {
        console.log(`Error during local strategy authentication: ${error}`);
        return done(null, false);
      }
    }
  )
);

module.exports = passport;

routes / user.js

router.post('/user/login', (req, res, next) => {
  console.log('Authenticating');
  passport.authenticate('local', (err, user, info) => {
    if (err) {
      res.status(500).json({ status: err });
    }
    if (!user) {
      res.status(404).json({ status: 'User not found' });
    }
    if (user) {
      req.logIn(user, function(err) {
        if (err) {
          res.status(500).json({ status: 'Error while logging in' });
        }
        res.redirect('/');
      });
    }
  })(req, res, next);
});

router.get('/user/logout', userUtils.loginRequired, (req, res, next) => {
  req.logout();
  res.status(200).json({ status: 'Logged out' });
});

database.js

const pgp = require('pg-promise')(initOptions);
const conn = pgp(connectionConfig);

module.exports = {
  pgp,
  conn
};

任何帮助将不胜感激。

Connect-pg-simple无法将会话保存到数据库

0 个答案: