Cookie未使用express和passport进行设置

res.cookie('cookieName', 'cookieValue', { maxAge: 3600000, httpOnly: true });

const cookieValue = req.cookies.cookieName;

npm install express passport passport-local express-session cookie-parser

const express = require('express');
const passport = require('passport');
const LocalStrategy = require('passport-local').Strategy;
const session = require('express-session');
const cookieParser = require('cookie-parser');

const app = express();

app.use(cookieParser());
app.use(session({
  secret: 'your-secret-key',
  resave: false,
  saveUninitialized: false
}));
app.use(passport.initialize());
app.use(passport.session());

passport.use(new LocalStrategy(
  (username, password, done) => {
    // 在这里实现用户认证逻辑，比如查询数据库并验证用户名和密码是否匹配
    if (username === 'admin' && password === 'password') {
      return done(null, { id: 1, username: 'admin' });
    }
    return done(null, false);
  }
));

passport.serializeUser((user, done) => {
  done(null, user.id);
});

passport.deserializeUser((id, done) => {
  // 根据用户ID查询数据库或其他持久化存储来获取用户对象
  const user = { id: 1, username: 'admin' };
  done(null, user);
});

// 登录路由
app.post('/login', passport.authenticate('local', {
  successRedirect: '/profile',
  failureRedirect: '/login'
}));

// 受保护的路由
app.get('/profile', ensureAuthenticated, (req, res) => {
  res.send('Welcome to your profile page');
});

// 辅助函数，用于验证用户是否已经通过身份验证
function ensureAuthenticated(req, res, next) {
  if (req.isAuthenticated()) {
    return next();
  }
  res.redirect('/login');
}