使用node.js 和pgAdmin。我已经为服务器、 session 、cookie 等设置了所有必要的代码。我收到的错误是“TypeError:无法读取未定义的属性‘用户名’”。从一个页面重定向到另一页面后， session 将不会持续。具体来说是从登录注册页面到订单表格。如何让 session 在重定向后保持不变？任何帮助将不胜感激，谢谢!
const LocalStrategy = require("passport-local").Strategy;
const { pool } = require('./dbConfig');
const bcrypt = require('bcryptjs');
function initialize (passport) {
const authenticateUser = (username, password, done) => {
pool.query(
`SELECT * FROM credentials WHERE username = $1`,
[username], (err, results) => {
if(err) {
throw err;
}
if(results.rows.length === 1) {
const user = results.rows[0];
bcrypt.compare(password, user.password, (err, isMatch) => {
if(err){
throw err
}
if(isMatch){
return done(null, user);
}
else {
return done(null, false, {message: "Incorrect password"});
}
})
}
else {
return done(null, false, {message: "Account does not exist"});
}
}
);
}
passport.use('user-local', new LocalStrategy({
usernameField: "username",
passwordField: "password"
}, authenticateUser));
passport.serializeUser(function (user, done)
{
done(null, user.user_id);
});
passport.deserializeUser(function (id, done) { console.log("---------------------------------------------");
pool.query(
`SELECT * FROM credentials WHERE user_id = $1`,
[id],
(err, results) => {
if(err) {
throw err;
}
return done(null, results.rows[0]);
}
)
});
const authenticateEmp = (username, password, done)=>{
pool.query(
`SELECT * FROM employee WHERE username = $1`,
[username], (err, results) => {
if(err) {
throw err;
}
if(results.rows.length == 1) {
const user = results.rows[0];
bcrypt.compare(password, user.password, (err, isMatch) => {
if(err){
throw err
}
if(isMatch){
return done(null, user);
}
else {
return done(null, false, {message: "Incorrect password"});
}
});
}
else {
return done(null, false, {message: "Account does not exist"});
}
}
);
}
passport.use('emp-local', new LocalStrategy({//Create admin controler
usernameField: "username",
passwordField: "password"
}, authenticateEmp));
passport.serializeUser((user, done) => done(null, user.user_id));
passport.deserializeUser((id, done) => {
pool.query(
`SELECT * FROM employee WHERE emp_id = $1`,
[id],
(err, results) => {
if(err) {
throw err;
}
return done(null, results.rows[0]);
}
);
});
}
module.exports = initialize;
userRouter.get("/loginregister", (req, res) => {
res.render("../views/loginRegister");
});
userRouter.get("/orderform", (req, res) => {
console.log(req.user);
res.send(`Hello ${req.user.username}. Your session ID is ${req.sessionID}
and your session expires in ${req.session.cookie.maxAge}
milliseconds.<br><br>
<a href="/logout">Log Out</a><br><br>
<a href="/secret">Members Only</a>`);
//res.render("../views/orderForm");
});
function loginController (req, res, next) {
passport.authenticate('user-local', function(err, user, info) {
if (err) { return next(err); }
if (!user) { return res.redirect('/loginregister'); } // Can attach flash message here and personalize req.body.email
req.logIn(user, function(err) {
if (err) { return next(err); }
console.log(req.sessionID);
return res.redirect('/user/orderform');
});
})(req, res, next);
};
const { name } = require("ejs");
const express = require("express");
const app = express();
const path = require('path');
const parseurl = require('parseurl')
const session = require("express-session");
const flash = require("express-flash");
const uid = require('uid-safe');
const assert = require('assert');
const pgStore = require('connect-pg-simple')(session);
const router = require('../views/routes');
const passport = require('passport');
const { pool } = require('./dbConfig');
const passportConfig = require("./passportConfig");
const PORT = process.env.PORT || 4000;
app.set('view engine', 'ejs');
app.use(express.urlencoded({ extended: false }));
uid(18, function (err, val) {
if (err) return done(err)
assert.strictEqual(Buffer.byteLength(val), 24);
})
app.use(session({
genid: function(req) {
return uid(18) // use UUIDs for session IDs
},
secret: process.env.SECRET_KEY,
resave: 'false',
saveUninitialized: 'false',
cookie: {
secure: false,
maxAge: 24 * 60 * 60 * 1000 // One day
},
store: new pgStore({
pool : pool, // Connection pool
tableName : process.env.TABLE_NAME
// Insert connect-pg-simple options here
})
}));
if (app.get("env") === "production") {
// Serve secure cookies, requires HTTPS
session.Cookie.secure = true;
}
app.use(flash());
passportConfig(passport);
app.use(passport.initialize());
app.use(passport.session());
app.use(express.json());
app.use ('/', router);
app.use(express.static(path.resolve(__dirname, './css')));
app.listen(PORT, () => {
console.log(`Server running on port ${PORT}`);
});
最佳答案
要调试为什么您没有获得 session cookie，请将现有的 session 中间件替换为:
app.use(session({
secret: 'keyboard cat',
}));
验证您的 session cookie 是否适用。然后，如果是这样，开始一次添加一个 session 选项，直到找到导致工作停止的选项。
一些其他注释。
您的快速 session 的 uid 实现未正确实现。
首先，express-session 有自己的内置 uid 生成器。除非您有内置生成器无法满足的某些特定的独特要求，否则您不需要自己提供。
根据doc对于 uid 安全，同步 UID 是通过以下方式生成的:
uid.sync(18)
不，您正在使用的只是uid(18)。这只是返回一个 promise 对象，该对象不适用于唯一的 id。
所以，这个:
genid: function(req) {
return uid(18);
},
应该是这样的:
genid: function(req) {
return uid.sync(18);
},
或者，只需将 uid 生成留给 Express-Session 自行完成。
哦，这是一个有趣的事实，express-session 中的默认实现已经使用了 uid-safe。
关于javascript - 在 Node.js 中重定向后 Express session 不会持续存在，我们在Stack Overflow上找到一个类似的问题： https://stackoverflow.com/questions/70584039/