在使用 socket.io 时获取 express.js 中的当前用户？

Question

我正在使用 express 框架，我的部分网络应用程序使用 socket.io 来启用实时聊天。我需要获取当前用户的用户名，并在其中创建一个房间。问题是当调用 socket.on('connection') 时我找不到获取用户信息的方法。这是我到目前为止的相关代码：

var express = require('express');
var passport = require('passport');                                                                                    
var LocalStrategy = require('passport-local').Strategy;                                                                
var mongoose = require('mongoose');                                                                                    
var session = require('express-session');                                                                              
var http = require('http');
var routes = require('./routes/index');
var app = express();                                                                                                   
var server = http.createServer(app);                                                                                   
var io = require('socket.io')(server);                                                                                 

server.listen(4000);
app.use(session({secret : 'anything',                                                                                  
    saveUninitialized: true,                                                                                           
    resave: true}));                                                                                                   
app.use(passport.initialize());                                                                                        
app.use(passport.session());

mongoose.connect('mongodb://localhost/my_db');
var Schema = mongoose.Schema;                                                                                          
var UserDetail = new Schema({                                                                                          
    username: String,                                                                                                  
    password: String                                                                                                   
}, {                                                                                                                   
    collection: 'users'                                                                                                
});                                                                                                                    
var UserDetails = mongoose.model('users', UserDetail);                                                                 

app.use('/', routes);                                                                                                  
app.use('/users', users);                                                                                              

app.post('/login',                                                                                                     
        passport.authenticate('local', {                                                                               
            successRedirect: '/loginSuccess',                                                                          
            failureRedirect: '/loginFailure',                                                                          
        })                                                                                                             
        );

io.on('connection', function(socket) {                                                                                 
    console.log('socket stuff');                                                                                       
    var sessionStore = session;                                                                                        
    var sessionId    = socket.handshake.sessionId;                                                                     

    sessionStore.get(sessionId, function(err, session) {                                                               
        if(!err) {                                                                                                     
            console.log('no error');                                                                                   
            if(session.passport.user) {                                                                                
                console.log('This is the users email address %s', session.passport.user);                              
            }                                                                                                          
        }                                                                                                              
    });                                                                                                                
    socket.emit('newMessage', {content : 'Chat message content'});                                                     
});

最后一个函数是我遇到问题的地方。当用户请求页面时，我可以通过 req.user 找到他们的用户名，但是当我没有 req 时我不知道该怎么做。我在 io.on('connection') 中的会话代码根本不起作用，只会抛出错误，我想我会保留它以显示我到目前为止所做的尝试。

Answer 1

这已被问过几次，但我找到的旧答案不再起作用。答案在于解析socket.handshake.headers.cookie，但这很老套，将取决于express-session 的内部结构。

无论如何，这现在应该适用于 Express 4 和 socket.io 1.1：

var express   = require('express'),
    session   = require('express-session'),
    cookie    = require('cookie'),
    signature = require('cookie-signature');

var app    = express(), 
    store  = new session.MemoryStore(),
    secret = 'session-secret-key',
    name   = 'connect.sid';

app.use(session({
  name:   name,
  secret: secret,
  store:  store,
  resave: true,
  saveUninitialized: true
}));

var server = require('http').createServer(app),
    io     = require('socket.io')(server);

io.on('connection', function(socket) {
  if (socket.handshake && socket.handshake.headers && socket.handshake.headers.cookie) {
    var raw = cookie.parse(socket.handshake.headers.cookie)[name];
    if (raw) {
      // The cookie set by express-session begins with s: which indicates it
      // is a signed cookie. Remove the two characters before unsigning.
      socket.sessionId = signature.unsign(raw.slice(2), secret) || undefined;
    }
  }
  if (socket.sessionId) {
    store.get(socket.sessionId, function(err, session) {
      console.log(session);
    });
  }
});