未经授权和错误请求的 Passport.js 自定义错误

Question

实现passport-jwt 并尝试在用户为假时抛出自定义错误响应（电子邮件|密码为空`） 如果用户没有注册

api.js

const passport = require('passport');
const router = require('express-promise-router')();

const passportHelper = require('../helpers/passportHelper');
const authController = require('../controllers/authController');
const { badRequest } = require('../helpers/responseHelper');

const requireAuth = passport.authenticate('jwt', { session: false });
const requireSignin = passport.authenticate('local', { session: false }, (err, user, info) => {
    if(!user) {
        const err = new Error('please provide email and password.');
            err.status = 400;
            err.code = 'CP_SI_ValidationFailed';
            return err;
    }
});

router.post('/signup', authController.signup);
router.post('/signin', requireSignin, authController.signin);

module.exports = router;

当我尝试使用邮递员登录时，我没有得到任何响应

预期结果

{
    "error": {
        "code": "CP_SI_ValidationFailed",
        "message": "email and password is required"
    }
}

有没有其他方法可以处理 badRequest 并返回上面的 resonse ，

谢谢你

Answer 1

这是一个确实返回响应的更新答案。

const requireSignin = (req, res, next) => {
  passport.authenticate('local', { session: false }, (err, user, info) => {
    if (err || !user) {
      const err = {};
      err.status = 400;
      err.code = 'CP_SI_ValidationFailed';

      return res.json(err); // send the error response to client
    }
    return next(); // continue to next middleware if no error.

  })(req, res, next); /* passport.authentication returns a function,
                         we invoke it with normal req..res arguments 
                         to override default functionality */ 
}

Answer 2

从 passport.authenticate 回调中返回错误是不够的。返回值不被护照处理。如果要向客户端返回自定义错误，则应编写自定义中间件。如果您将 requireSignin 方法更改为以下内容，它应该可以正常工作：

const requireSignin = function(req, res, next) {
    passport.authenticate('local', { session: false }, (err, user, info) => {
        if(err || !user) {
            const err = {};
            err.status = 400;
            err.code = 'CP_SI_ValidationFailed';

            return res.json(err); // send the error response to client
        } 
        return next(); // continue to next middleware if no error.
    });
});