nodejs运用passport和passport-local分离本地登录

var express = require('express');
var cookieParser = require('cookie-parser');
var bodyParser = require('body-parser');
var session = require('express-session');
var swig = require('swig');
var user = require('./modules/user');
var app = express();



//设置swig模板方法;
app.engine('html', swig.renderFile);
app.set('view engine', 'html');
app.set('views', __dirname + '/views');

//console.log(user)
app.use(session({
  secret: 'hubwiz app', //secret的值建议使用随机字符串
  saveUninitialized: true,
  //此处的cookie设置需要注意;
  cookie: {
    secure: false
  } // 过期时间（毫秒）
}));
app.use(bodyParser.json());
app.use(bodyParser.urlencoded({ extended: true }));
app.use(cookieParser());


//引入插件并配置;

var passport = require('passport')
  , LocalStrategy = require('passport-local').Strategy;


app.use(passport.initialize());
app.use(passport.session());
passport.use('local', new LocalStrategy(
  function (username, password, done) {
    var user = {
      id: '1',
      username: '123',
      password: '123'
    };

    if (username !== user.username) {
      return done(null, false, { message: 'Incorrect username.' });
    }
    if (password !== user.password) {
      return done(null, false, { message: 'Incorrect password.' });
    }
    //验证成功后,传入后面的流程；
    return done(null, user);
  }
));

passport.serializeUser(function (user, done) {
  //此处设置session中保存用户的信息,这里保存ID；
  done(null, user.id);
});

passport.deserializeUser(function (user, done) {
  done(null, user);
});

app.get('/users',function(req,res){
  res.send("ok");
});

app.get('/',function(req,res){
  res.send("fail");
});


app.get('/login', function (req, res) {
  res.render('index', {title: 'index'});
});


//登录入口验证;前面配置的数据处理流,在这里传入验证函数里面；用户信息会保存在session里，并标记登录状态;
app.post('/login', passport.authenticate('local', {
    successRedirect: '/users',
    failureRedirect: '/'
  }),function(req,res){
  console.log(req.body);
});


app.get('/logout', function (req, res) {
  req.logout();
  res.redirect('/');
});

//登录验证函数;通过此函数验证用户是否登录;
function isLoggedIn(req, res, next) {
  if (req.isAuthenticated())
    return next();
  console.log(req.session);
  res.send("未登录");
}


app.get("/app",isLoggedIn,function(req,res){
  console.log(req.session);
  res.send("登录app");
});


app.listen(8080);

相关资源

Express结合Passport实现登陆认证