使用 Passport 在 Node JS 中实现基于 cookie 的身份验证

Question

下面是我的 server.js (app.js)。我正在使用带护照的快递来进行用户身份验证。但是每当我重新启动节点服务器时，用户都会注销。

我对 nodejs 很陌生，我想知道如何实现基于 cookie 的身份验证。这样即使服务器启动，该用户也不会注销。我确定有一些我无法找到的配置更改。

// server.js

// set up ======================================================================
// get all the tools we need
var express  = require('express');
var app      = express();
var port     = process.env.PORT || 80;
var mongoose = require('mongoose');
var passport = require('passport');
var flash    = require('connect-flash');

var morgan       = require('morgan');
var cookieParser = require('cookie-parser');
var bodyParser   = require('body-parser');
var session      = require('express-session');

var configDB = require('./config/database.js');

// configuration ===============================================================
mongoose.connect(configDB.url); // connect to our database

require('./config/passport')(passport); // pass passport for configuration

// set up our express application
app.use(morgan('dev')); // log every request to the console
app.use(cookieParser()); // read cookies (needed for auth)
app.use(bodyParser()); // get information from html forms

app.set('view engine', 'ejs'); // set up ejs for templating

// required for passport
app.use(session({ secret: 'yassers' })); // session secret
app.use(passport.initialize());
app.use(passport.session()); // persistent login sessions
app.use(flash()); // use connect-flash for flash messages stored in session

// routes ======================================================================
require('./app/routes.js')(app, passport); // load our routes and pass in our app and fully configured passport

// launch ======================================================================
app.listen(port);
console.log('The magic happens on port ' + port);

Answer 1

重新启动时它会注销，因为它存储在 MemoryStore(RAM) 中。使用 mongoStore 存储会话 mongodb。试试下面的代码：

var session = require('express-session');
var MongoStore = require('connect-mongo')(session);

var mongoStore = new MongoStore({
  url: 'your mongo db url'  
});

app.use(session({
  secret: 'your secret',
  saveUninitialized: true, // don't create session until something stored
  resave: false, //don't save session if unmodified
  store: mongoStore,
  cookie: {
    domain: 'domain name',    
    maxAge: 1000 * 24 * 60
  }
}));