javascript - Node JS 重定向给了我一堆 html 文本

Question

想问一个有关nodeJS重定向和渲染的问题。

app.js

在我的 app.js 中，我有这些代码，效果很好。

app.get('/dashboard', routes.dashboard);
app.get('/error/404', error.notFound);

然后，进一步探讨方法

错误.notFound

当您从 URL 加载它时，效果也很好

exports.illegal = function(req, res){
    var authLevel = '';
    var entityName = '';
    var entityId = '';
    var deviceId = '';

    if (req.session.authorizationLevel) authLevel = req.session.authorizationLevel;
    if (req.session.name) entityName = req.session.name;
    if (req.session.entityId) entityId = req.session.entityId;
    if (req.session.deviceId) deviceId = req.session.deviceId;

    res.render('error/illegal', {
        title: 'Illegal'
        , viewClass: 'illegal'
        , ngController : ''
        , entityName : entityName
        , entityId : entityId
        , deviceId : deviceId
        , authorizationLevel : authLevel
    });
};

routes.dashboard

当您从 URL 加载它时，效果也很好

exports.dashboard = function(req, res){
    //Method for authorization, see below. This is giving me error.
    authorizationHelper.authorizationLevels(req, res, 400);

    var authLevel = '';
    var entityName = '';
    var entityId = '';
    var deviceId = '';

    if (req.session.authorizationLevel) authLevel = req.session.authorizationLevel;
    if (req.session.name) entityName = req.session.name;
    if (req.session.entityId) entityId = req.session.entityId;
    if (req.session.deviceId) deviceId = req.session.deviceId;

    res.render('dashboard', {
        title: 'Dashboard'
        , viewClass: 'dashboard'
        , ngController: 'dashboardController'
        , entityName : entityName
        , entityId : entityId
        , deviceId : deviceId
        , authorizationLevel : authLevel
    });

};

这是一个棘手的部分，它给了我一些错误。

    //Method for authorization, see below. This is giving me error.
    authorizationHelper.authorizationLevels(req, res, 400);

授权助手

此方法将检查用户是否允许查看该页面，否则将重定向

exports.authorizationLevels = function(req, res, levelRequired){
    if (req.session.authorizationLevel < levelRequired || !req.session.authorizationLevel){
        //user is not allowed to view the page, redirect to illegal page
        res.redirect('/error/401');
    }
}

问题是，从顶部到这个 res.redirect('/error/401') 一切都工作正常，有时，在服务器上，它不会渲染页面，而是会渲染一大堆 HTML文本和一些标题!!!

请帮忙!

Answer 1

你可以改变

exports.authorizationLevels = function(req, res, levelRequired) {
  if (req.session.authorizationLevel < levelRequired || !req.session.authorizationLevel){
      //user is not allowed to view the page, redirect to illegal page
      res.redirect('/error/401');
  }
}

至

exports.authorizationLevels = function(req, res, levelRequired) {
  if (req.session.authorizationLevel < levelRequired || !req.session.authorizationLevel){
      //user is not allowed to view the page, redirect to illegal page
      res.redirect('/error/401');
      return false;
  }
  return true;
}

和

authorizationHelper.authorizationLevels(req, res, 400);

至

if (!authorizationHelper.authorizationLevels(req, res, 400))
  return;

这将阻止在未经授权的访问的情况下呈现仪表板。

此外，您可能会考虑集中错误处理，以便只需安装错误处理程序中间件((err, req, res, next))并在那里渲染错误模板(同时简单地执行next(401); 以及路由处理程序中的错误等)，除非您希望它们在浏览器中看到 /error/401 和此类 URL。