node.js - 会话不与 express-session 和 connect-mongo 保持一致
问题描述
我的 express 服务器正在使用 express-session 和 connect-mongo,它为来自同一用户的每个请求生成一个新会话,而不是像预期的那样持久化一个会话。这是我第一次使用快速会话,但我认为我的代码没有问题。在测试时,我是唯一的用户,当我查看我的 MongoDB 时,会有一堆新会话。每次我向需要使用会话变量的路由发出请求时,它都会生成另一个新会话。
编辑:客户端没有存储会话 ID,因此每个请求都会导致一个新会话。正在发送正确的 set-cookie 标头,所以我不确定它为什么不起作用。我使用 Firefox 作为我的客户端。
编辑 2:尝试使用 Edge 和 Chrome,它们也没有设置会话 cookie。我是会话新手,所以我不知道为什么它不能正常工作。
// 3rd party modules
const util = require('util');
const express = require('express');
const bodyParser = require('body-parser');
const multer = require('multer');
const morgan = require('morgan');
const mongoose = require('mongoose');
const config = require('config');
const session = require('express-session');
const MongoStore = require('connect-mongo')(session);
// Custom classes
const AuthService = require('./services/authService');
// Models
const Account = require('./models/account');
// Load .env config file
const envConfigResult = require('dotenv').config();
if (envConfigResult.error) {
throw envConfigResult.error;
}
// Instances
let auth;
let upload = multer();
const app = express();
// Parse request data and store in req.body
app.use(bodyParser.json()); // json
app.use(bodyParser.urlencoded({ extended: true })); // x-www-form-url-encoded
app.use(upload.array()); // multipart/form-data
// Setup logging
app.use(morgan('dev'));
// JWT error handling
app.use(function (err, req, res, next) {
// TODO: Implement proper error code
res.status(401).send(err);
if (err.name === 'UnauthorizedError') {
res.status(401).send('invalid token...');
}
});
async function main() {
try {
const mongoDbUrl = process.env.DB_HOST;
// Use new url parser and unified topology to fix deprecation warning
const mongoConnection = mongoose.connect(mongoDbUrl, { useNewUrlParser: true, useUnifiedTopology: true }).then(async function() {
console.log(`Successfully connected to MongoDB database at ${mongoDbUrl}!`);
}).catch(function(error) {
console.log(`Error whilst connecting to MongoDB database at ${mongoDbUrl}! ${error}`);
});
mongoose.set('useCreateIndex', true); // Fixes deprecation warning
} catch (err) {
console.log(`Error whilst doing database setup! ${err}`);
}
try {
app.use(session({
store: new MongoStore({ mongooseConnection: mongoose.connection, ttl: 86400 }),
secret: process.env.SESSION_SECRET,
resave: false,
saveUninitialized: false,
cookie: {
path: "/",
maxAge: 3600000, // 1 hour
httpOnly: false,
secure: false // TODO: Update this on production
}
}));
console.log("Sessions successfully initialized!");
} catch (err) {
console.log(`Error setting up a mongo session store! ${err}`);
}
try {
// TODO: Initialize email service
auth = new AuthService.AuthService();
// TODO: Attach email service to auth service
} catch (err) {
console.log(`Error whilst doing initial setup. ${err}`);
}
}
main();
// Routes
const rootRoute = require('./routes/root');
const tokensRoute = require('./routes/tokens');
const captchaRoute = require('./routes/captcha');
// Route middlewares
app.use('/v1/', rootRoute.router);
app.use('/v1/tokens', tokensRoute.router);
app.use('/v1/captcha', captchaRoute.router);
try {
rootRoute.setAuthService(auth);
tokensRoute.setAuthService(auth);
} catch (err) {
console.log(`Error attaching auth service to routes! ${err}`);
}
var server = app.listen(8088, function() {
let host = server.address().address;
let port = server.address().port;
if (host == "::") {
console.log("Server running at http://127.0.0.1:%d", port);
} else {
console.log("Server running at http://%s:%d", host, port);
}
});
解决方案
正如文档(或 npm 页面)中所解释的,您似乎忘记了一行:
app.use(session({
secret: 'foo',
store: new MongoStore(options)
}));
推荐阅读
- java - SpringBoot Security & MongoRepository 如何通过用户名和密码获取用户
- swift - 节省步进器 SwiftUI 的价值
- python - 在 Plotly 中,如何在使用更新按钮在不同图形之间切换时动态更改轴标题
- jquery - 使用 jQuery 更新特定 th 下的单元格值到链接
- pyinstaller - PyInstaller:尝试运行分发文件时出现 FileNotFoundError
- github - 当 access_token 过期时, github api to refresh_token 会抛出 bad_refresh_token 错误
- qt - 将 QTextStream 转换为 QByteArray
- javascript - 对象对象显示在反应中的选择标签中
- java - Spring Boot 嵌入式 Apache Derby
- kubernetes - 如何经营一次性工作?