javascript - Express.js Passport认证失败自动跳过策略

Question

更新

我已将代码从 Passport 本地注册内部移至单独的处理程序，并且运行良好。问题出在 Passport 和本地注册的使用上，但我不知道为什么。

---

我有一个使用 Node.js (Express) + Passport 进行身份验证和注册的设置。这是以前使用过的标准程序，但它似乎不起作用。 Passport 注册立即转到失败重定向。主要问题是代码没有命中任何 console.log() 语句，因此我假设它甚至没有处理第一个请求并自动失败。知道为什么或如何调试吗？

命令日志:

POST /register 302 4ms - 58b
GET / 304 2ms
GET /css/bootstrap.css 304 1ms
GET /css/main.css 304 1ms
GET /javascript/chart.js 304 2ms
GET /javascript/bootstrap.js 304 2ms
GET /javascript/index.js 304 2ms

index.html 形式:

 <form class="form-register" name="register-form" method="post" action="/register" data-name="register Form" enctype="application/x-www-form-urlencoded">
     <div class="ARegistration" style="display:none;">
         <input type="email" id="txtOnceEmail" class="form-control" style="width:300px; display:block;" placeholder="One use Email Address" name="AEmail">
           <br />

         <input type="text" id="txtCodeName" class="form-control" style="width: 200px; display:block;" placeholder="Code Name" name="CodeName">
           <br />

         <input type="number" id="txtSecretCodeLength" value="10" class="form-control" style="width: 200px; display:block;" placeholder="Secret Code Length" name="SecretCodeLength">
           <br />

         <textarea id="txtaXInfo" class="form-control" placeholder="Any info" name="aXInfo"></textarea>

         <button class="btn btn-info btn-xs">Register</button>
      </div>
  </form>

路线:

    app.post('/register', passport.authenticate('local-signup', {
        successRedirect : '/', // redirect to the secure profile section
        failureRedirect : '/', // redirect back to the signup page if there is an error
        failureFlash : true // allow flash messages
    }));

Passport 本地注册:

// =========================================================================
// LOCAL SIGNUP ============================================================
// =========================================================================
passport.use('local-signup', new LocalStrategy({
    // by default, local strategy uses username and password, we will override with email
    usernameField: 'email',
    passwordField: 'password',
    passReqToCallback: true // allows us to pass in the req from our route (lets us check if a user is logged in or not)
},
function (req, email, password, done) {
    // asynchronous
    process.nextTick(function () {
        // check if the user is already logged in
        if (!req.user) {
            console.log("step1");
            User.findOne({ $or: [{ 'valid.email': email }, { 'emailList': email }] }, function (err, user) {
                // if there are any errors, return the error
                if (err)
                    return done(err);

                // check to see if theres already a user with that email
                if (user) {
                    console.log("step2");
                    return done(null, false, req.flash('signupMessage', 'That email is already taken.'));
                } else {

                        console.log("step5");
                        newUser.anonym.CodeName = req.body.CodeName;
                        newUser.anonym.extraInfo = req.body.aXInfo;
                        newUser.emailList.push(req.body.AEmail);

                        //Generate random string
                        var rString = null;
                        var goOn = false;

                        while (!goOn)
                        {
                            console.log("step6");
                            rString = randomString(req.body.SecretCodeLength, charSet);
                            User.findOne({ 'emailList': rString }, function (err, user) {
                                // if there are any errors, return the error
                                if (err){
                                    console.log(err);
                                    return done(err);}

                                // check to see if theres already a user with that email
                                if (!user) {
                                    goOn = true;
                                }
                            });
                        }
                        console.log("step7");
                        newUser.anonym.secretCode = rString;
                        rString = null;

                        newUser.save(function (err) {
                            if (err)
                                throw err;
                            return done(null, newUser);
                        });
                    }
                // }
            });
        } else {
            console.log('test5');
        }
    });

}));

也使用 angular.js 测试了它来执行帖子，但问题仍然存在。这绝对是有 Passport 的东西。

Answer 1

问题出在这里:

passport.use('local-signup', new LocalStrategy({
// by default, local strategy uses username and password, we will override with email
usernameField: 'email',
passwordField: 'password',
passReqToCallback: true // allows us to pass in the req from our route (lets us check if a user is logged in or not)

},

如果未提供email 或password Passport 将自动失败。我想这方面的一些文档会很有用!