我有以下app.js代码
app.configure(function(){
app.set('port', process.env.PORT || 3000);
app.set('views', __dirname + '/views');
app.enable('jsonp callback');
app.set('view engine', 'jade');
app.set('view options', {layout : false});
app.use(express.bodyParser());
app.use(express.methodOverride());
app.use(express.cookieParser());
app.use(express.session({
secret : 'abcdefg'
}));
app.use(app.router);
app.use(express.static(__dirname + '/public'));
app.use(function(req, res, next){
res.locals.user = req.session.user;
next();
})
});
我正在尝试将其设为.jade视图中的以下代码
- if(session.user)
div#logoutsection.pull-right
a#logout-btn.btn.btn-info.pull-right.top-bar-form-button(href='logout/') Logout
p#loginprompt.pull-right.login-prompt #{session.user.username} logged In
- else
ul.pull-right
li
a#signup-btn.btn.pull-right.top-bar-form-button(href='#signup-modal', data-toggle="modal") Sign Up
因此，如果他们没有登录，请提供注册选项，如果他们已登录，请告诉他们他们已“登录”。我在app.configure代码末尾添加了函数，就像它使用dynamicHelpers()之前一样。我被告知cookieParser()是要走的路，但是我如何编写代码以便我可以检查我的用户是否已登录并提供他们的用户名，因为我正在尝试上面？
任何帮助表示感谢。
谢谢！
编辑：index.js
'use strict'
var util = require('util');
var Logger = require('devnull');
var logger = new Logger({namespacing : 0});
var User = require('../schemas/User');
var Post = require('../schemas/Post');
/**
* Get Meta information about all the Post's
*/
var getAllMeta = function(req, res, next){
Post.getAllMeta(function(err, postsList){
if(!err && postsList){
req.postsList = postsList;
}
next(err);
});
};
/**
* validate the signup credentials entered by the user
* @param {String} username
* @param {String} pass1 : first password
* @param {String} pass2 : verification password
*/
var validateUserData = function(username, pass1, pass2){
if(pass1.trim() !== pass2.trim()){
util.log('Passwords not Matching ' + pass1 + ' ' + pass2);
return 'Passwords not Matching';
}
return '';
//put any other validations here
};
/*
* GET home page.
*/
module.exports = function(app){
/**
* Map the URL '/' to the callback
*/
app.get('/', function(req, res){
logger.log('Serving request for url [GET]' + req.route.path)
Post.getAll(function(err, allPosts){
if(!err && allPosts){
res.render('index', {'allPosts' : allPosts});
}else{
util.log('Error fetching posts from database : ' + err);
res.render('error');
}
});
});
/**
* Map the URL '/login' to the callback
*/
app.post('/login', function(req, res){
logger.log('Serving request for url [POST] ' + req.route.path);
var username = req.body.User;
var password = req.body.Password;
User.validateUser(username, password, function(err, user){
if(err && !user){
res.json({
retStatus : 'failure'
});
}else{
console.log(user);
req.session.user = user;
res.json({
retStatus : 'success',
user : user ,
});
}
});
});
/**
* Logout the current user and clear the session
*/
app.get('/logout', function(req, res){
logger.log('Serving request for url [GET] ' + req.route.path);
req.session.user = undefined;
res.redirect('/');
});
/**
* Add a new User to database
*/
app.post('/signup', function(req, res){
util.log('Serving request for url [POST] ' + req.route.path);
var signupForm = req.body.signupForm;
var username = signupForm.username;
var pass1 = signupForm.pass1;
var pass2 = signupForm.pass2;
var validateMsg = validateUserData(username, pass1, pass2);
if(validateMsg !== ''){
res.json({
'retStatus' : 'failure',
'message' : validateMsg
});
}else{
var newUser = new User();
newUser.username = username;
newUser.password = pass1;
newUser.save(function(err, savedUser){
var message = '';
var retStatus = '';
if(!err){
util.log('Successfully created new user with Username : ' + username);
message = 'Successfully created new user : ' + username;
retStatus = 'success';
req.session.user = savedUser;
}else{
util.log('Error while creating user : ' + username + ' error : ' + util.inspect(err));
if(err.code === 11000){
message = "User already exists";
}
retStatus = 'failure';
}
res.json({
'retStatus' : retStatus,
'message' : message
});
});
}
});
app.get('/admin', getAllMeta, function(req, res){
util.log('Serving request for url [GET] ' + req.route.path);
if(req.session.user){
res.render('post', {'postsList' : req.postsList});
}else{
res.redirect('/');
}
});
/**
* Save the post to database
*/
app.post('/admin/save/post', function(req, res){
var postContent = req.body.postContent;
if(postContent.postKey === '' || postContent.postKey === undefined){
var post = new Post();
post.subject = postContent.postSubject;
post.content = postContent.postContent;
post.author = req.session.user.username;
post.tags = postContent.postTags;
post.save(function(err, response){
if(!err && response){
util.log('Successfully saved Post with id : ' + response.id);
res.json({
'retStatus' : 'success',
'data' : response
})
}else{
util.log('Error saving the Post : ' + err);
res.json({
'retStatus' : 'failure',
'error' : err
});
}
});
}else{
var conditions = {'key' : postContent.postKey};
var update = {
'subject' : postContent.postSubject,
'content' : postContent.postContent,
'tags' : postContent.postTags
};
Post.update(conditions, update, null, function(err, numAffected){
if(!err && numAffected){
util.log('Successfully updated the Post with id : ' + postContent.postKey);
res.json({
'retStatus' : 'success',
'numAffected' : numAffected
});
}else{
util.log('Error updating the Post with id : ' + postContent.postKey + ' ' + err);
res.json({
'retStatus' : 'failure'
});
}
});
}
});
app.get('/post/show/:key', function(req, res){
Post.findByKey(req.params.key, function(err, postData){
if(!err && postData){
postData = postData[0];
res.json({
'retStatus' : 'success',
'postData' : postData
});
}else{
util.log('Error in fetching Post by key : ' + req.params.key);
res.json({
'retStatuts' : 'failure',
'msg' : 'Error in fetching Post by key ' + req.params.key
});
}
});
});
app.post('/admin/save/', function(req, res){
//container for saving a post
});
app.get('/admin/remove/:key', function(req, res){
//container for deleting a post
});
app.get('/contact', function(req, res){
util.log('Serving request for url[GET] ' + req.route.path);
res.render('contact');
});
};
user.js的
'use strict'
var util = require('util');
var bcrypt = require('bcrypt');
var mongoose = require('mongoose');
var Schema = mongoose.Schema;
var validatePresenceOf = function(value){
return value && value.length;
};
var toLower = function(string){
return string.toLowerCase();
};
var User = new Schema({
'username' : { type : String,
validate : [validatePresenceOf, 'a Username is required'],
set : toLower,
index : { unique : true }
},
'password' : String,
});
User.statics.findUser = function(username, password, cb){
return this.find({'username' : username}, cb);
};
User.statics.validateUser = function(username, password, cb){
this.find({'username' : username}, function(err, response){
var user = response[0];
if(!user || response.length === 0){
cb(new Error('AuthFailed : Username does not exist'));
}else{
if(password == user.password){
util.log('Authenticated User ' + username);
cb(null, user);
}else{
cb(new Error('AuthFailed : Invalid Password'));
}
}
});
};
module.exports = mongoose.model('User' , User);
答案 0 :(得分：1)
也许我对你的问题的理解是错误的，但你唯一缺少的是一条路线，你在那里认证用户，例如：
app.post('/login', function(req, res){
if(req.body.user == 'Ryan' && req.body.password == 'Dahl'){
req.session.user = aUserIdOrUserObject;
res.send(200) // or redirect
}
};
这是hust伪代码。您显然想检查用户和密码是否与您的数据库匹配。
您缺少的第二点是永久会话商店，例如https://github.com/masylum/connect-mongodb或https://github.com/CarnegieLearning/connect-mysql-session。内存存储仅对开发有用，在生产中可能会导致服务器中断。
答案 1 :(得分：1)
我在我工作的应用程序中所执行的操作，以及为了不必在每个控制器操作中执行此验证，是：
//userValidation.js
module.exports = function(req, res, next){
if(req.body.user == 'Ryan' && req.body.password == 'Dahl'){
next();
}else res.send("Not auth");
}
//controller.js
var validate = require("./userValidation");
app.post("/route", validate, function(req, res){
//if execution get to this point you are sure that user is authenticated.
});
此代码也来自App我的工作，这是我们如何设置会话工作。出于开发目的，您可以将MongoStore替换为MemoryStore。
app.configure(function(){
app.set('views', __dirname + '/views');
app.set('view engine', 'jade');
app.use(connect.compress());
app.use(express.static(__dirname + "/public", { maxAge: 6000000 }));
app.use(express.favicon(__dirname + "/public/img/favicon.ico", { maxAge: 6000000 }));
app.use(express.bodyParser());
app.use(express.methodOverride());
app.use(express.cookieParser());
app.use(express.session({
secret: config.sessionSecret,
maxAge: new Date(Date.now() + (1000 * 60 * 15)),
store: new MongoStore({ url: config.database.connectionString })
}));
app.use(function(req, res, next){
console.log("\n~~~~~~~~~~~~~~~~~~~~~~~{ REQUEST }~~~~~~~~~~~~~~~~~~~~~~~".cyan);
res.locals.config = config;
res.locals.session = req.session;
res.locals.utils = viewUtils;
next();
});
app.use(app.router);
app.use(function(req, res, next){
res.status(404).send("Resource not found");
});
});
为了在会话中设置用户，我们有：
var User = require("../utils/modelRegistrar").user; //any way to get the User model
var userRepository = require("../domain/repositories/usuarioRepository");
var hash = require("../utils/hash");
module.exports.init = function(app, io){
app.publicPost("/login", login);
app.put("/exit", exit);
};
function login(req, res){
var dadosDeLogin = req.body.dadosDeLogin;
userRepository.autenticar(dadosDeLogin.login, /*hash.md5(*/dadosDeLogin.senha/*)*/, function(err, user){
if(err) req.next(err);
if(user){
user.lastAcess = new Date();
user.access++;
userRepository.update(user, ["lastAcess", "acess"], function(err){
if(err) req.next(err);
else{
req.session.logedUser = user;
res.redirect("/home");
}
});
}
else res.redirect("/#user-not-found");
});
};
function exit(req, res){
if(req.session.logedUser) delete req.session.logedUser;
res.redirect("/");
}
可能部分代码仍然是葡萄牙语