1

我正在使用passport-google-oauth来验证 google 登录。几乎所有东西都工作正常，failureRedirect但当我从文件返回错误时从未调用过，config/google.js即，return done(new Error('Sorry! Your email id is not found. Please contact to Admin.'));

举例说明。请通过以下代码：-

配置/google.js

module.exports = (jwt, app, passport) => {
  const GoogleStrategy = require('passport-google-oauth').OAuth2Strategy;
  const User = require('../../models/user.model');

  passport.use(new GoogleStrategy({
    clientID: "xxxxxxxxxxxxxxxxxxxxxx",
    clientSecret: "xxxxxxxxxxxxxxx",
    callbackURL: "http://localhost:3000/api/user/google/callback"
  },
    function (accessToken, refreshToken, profile, done) {
      User.findOne({
        email: profile.emails[0].value,
        isActive: true
      }, function (err, user) {
        if (err) {
          return done(err);
        }
        if (!user) {
          return done(new Error('Sorry! Your email id is not found. Please contact to Admin.'));
        } else {
          return done(err, user);
        }
      });
    }
  ));
  return passport;
}

服务器.js

........
const passportGoogle = require('./server/config/auth/google')(jwt, app, passport);
const userRoute = require('./server/routes/user.route')(jwt, app, passportGoogle);
..........

user.route.js

import express from 'express';
const router = express.Router();
import User from '../models/user.model';
import UserCtrl from '../controllers/user.controller';

module.exports = (jwt, app, passportGoogle) => {
    /* GET api listing. */
    router.get('/', (req, res) => {
        UserCtrl.getUsers({})
            .exec((err, users) => {
                if (err)
                    return next(err);
                res.json(users)
            })
    });

    router.get('/google',
        passportGoogle.authenticate('google', { scope: ['profile', 'email'] }));

    router.get('/google/callback',
        passportGoogle.authenticate('google', { failureRedirect: '/session/login' }),

     //HERE :  failureRedirect: '/session/login' :- it never called

        function (req, res) {
            console.log('req.user', req.user)
            // Successful authentication, redirect home.
            res.redirect('/dashboard');
        });

    return router;
}
4

2 回答 2

2

我只是路过，看到你的问题没有得到解答，我认为false如果你想在谷歌护照策略中拒绝身份验证，你应该作为第二个参数而不是用户在完成回调中发送。这将触发failureRedirect。

  function (accessToken, refreshToken, profile, done) {
          User.findOne({
            email: profile.emails[0].value,
            isActive: true
          }, function (err, user) {
            if (err) {
              return done(err);
            }
            if (!user) {
              return done(new Error('Sorry! Your email id is not found. Please contact to Admin.', false));
              // Add False As Second Parameter.
            } else {
              return done(err, user);
            }
          });
        }
      ));
于 2018-07-29T08:45:54.833 回答
0

done 方法应该将两个参数都设置为 null 以触发 failureRedirect。像这样，done(null, null)

于 2021-12-30T22:17:12.167 回答