使用護照登錄無法捕獲401條件

Question

我使用PassportJS本地策略和護照本地貓鼬。以下是我的登錄腳本：

// Configure Passport (server.js) 
// --------------------------------------------------------------- 
passport.use(new LocalStrategy(User.authenticate())); 
passport.serializeUser(User.serializeUser()); 
passport.deserializeUser(User.deserializeUser()); 
// --------------------------------------------------------------- 

。

// POST to /login (authenticate.js) 
// --------------------------------------------------------------- 
router.post('/login', (req, res) => { 
    // server-side validation 
    const errors = { 
    username: Validator.validateusername(req.body.username), 
    password: Validator.validatepassword(req.body.password), 
    }; 
    if (!isEmpty(errors)) return res.send(JSON.stringify({ error: errors })); 

    passport.authenticate('local')(req, res,() => { 
    // If logged in, we should have user info to send back 
    if (req.user) { 
     const userdata = JSON.stringify(req.user); 
     const token = jwt.sign({ 
     username: req.user.username, 
     firstName: req.user.firstName, 
     lastName: req.user.lastName, 
     email: req.user.email, 
     img: req.user.img, 
     }, process.env.JWT_SECRET); 
     res.cookie('token', token); 
     return res.send(userdata); 
    } 
    // Otherwise return an error 
    return res.send(JSON.stringify({ error: 'There was an error logging in' })); 
    }); 
}); 

這工作正常，除非有登錄錯誤。如果因任何原因（401或500）登錄失敗，該腳本是否應該返回There was an error logging in消息？相反，它只是返回一個401 Unauthorized？

架構此認證擡頭是：

const { mongoose } = require('../config/dbconfig'); 

const Schema = mongoose.Schema; 
const passportLocalMongoose = require('passport-local-mongoose'); 

const User = new Schema({ 
    username: { 
     type: String, 
     lowercase: true, 
     required: true, 
     unique: true, 
    }, 
    password: { 
     type: String, 
     select: false, 
     required: true, 
    }, 
    firstName: { 
     type: String, 
     required: true, 
    }, 
    lastName: { 
     type: String, 
     required: true, 
    }, 
    email: { 
     type: String, 
     lowercase: true, 
     required: true, 
     unique: true, 
    }, 
    img: { 
     type: String, 
    }, 
}, { timestamps: true }); 

User.plugin(passportLocalMongoose); 

module.exports = mongoose.model('User', User); 

Answer 1

您呼叫的策略有點不對勁。您應該將其用作中間件，或者使用custom callback的方式。你們之間是一種混合 - 你把這種策略稱爲中間件，但是提供你自己的next middleware function。由於身份驗證稱爲中間件，但未提供failureRedirect選項，因此Passport將爲return 401 by default。 next函數是called when successfully authenticated，在你的情況下，它不是下一個中間件，而是一個回調函數。

要使用自定義的回調，你應該寫的路由處理程序是這樣的：

app.post('/login', (req, res, next) => { 
    // ... 
    passport.authenticate('local', (err, user, info) => { 
    if (err) { return next(err); } 
    if (user) { 
     // ... 
     req.login(user, (err) => { 
     if (err) { return next(err); } 
     return res.send(userdata); 
     }); 
    } else { 
     return res.status(401).send({ error: 'There was an error logging in' }); 
    } 
    })(req, res, next); 
});