xss*_*sss 2 cookies session login node.js express
我正在开发一个简单的登录系统,但似乎没有保存会话
我已经制作了一个简单的测试代码,谁能告诉我它有什么问题?我正在运行登录,之后我正在运行is_logged但是我从未登录,并且两个会话都是未定义的
var port = process.env.PORT || 8080;
var express = require('express');
var app = express();
var cookieParser = require('cookie-parser');
var session = require('express-session');
app.use(cookieParser());
app.use(session({
secret: "fd34s@!@dfa453f3DF#$D&W",
resave: false,
saveUninitialized: true,
cookie: { secure: true }
}));
app.post('/test_login', function(req, res){
req.session.users_schema = 1;
req.session.user_doc = 2;
res.json({"first": req.session.users_schema, "second": req.session.user_doc});
});
app.post('/test_is_loggin', function(req, res){
if( !req.session.users_schema || !req.session.user_doc ) {
console.log("no");
res.json({"first": 1, "second": 1});
}
else {
console.log("no2");
res.json({"first": req.session.users_schema, "second": req.session.user_doc});
}
});
app.listen(port);
console.log('Listening on port ' + port);
Run Code Online (Sandbox Code Playgroud)
这是因为选择 cookie.secure = true
引用
请注意,secure:true是推荐选项.但是,它需要启用https的网站,即安全cookie需要HTTPS.
请参阅https://github.com/expressjs/session#cookie-options
您必须将其设置为false,以允许非https主机上的会话cookie,或使用https主机.
测试代码
var port = process.env.PORT || 8080;
var express = require('express');
var app = express();
var cookieParser = require('cookie-parser');
var session = require('express-session');
app.use(cookieParser());
app.use(session({
secret: "fd34s@!@dfa453f3DF#$D&W",
resave: false,
saveUninitialized: true,
cookie: { secure: !true }
}));
app.get('/test_login', function(req, res){
req.session.users_schema = 1;
req.session.user_doc = 2;
res.json({"first": req.session.users_schema, "second": req.session.user_doc});
});
app.get('/test_is_loggin', function(req, res){
if( !req.session.users_schema || !req.session.user_doc ) {
console.log("no");
res.json({"first": 1, "second": 1});
}
else {
console.log("OK");
res.json({"first": req.session.users_schema, "second": req.session.user_doc});
}
});
app.listen(port);
console.log('Listening on port ' + port);
Run Code Online (Sandbox Code Playgroud)
产量
[mh-cbon@pc15 test] $ node express-session.js
Listening on port 8080
OK
Run Code Online (Sandbox Code Playgroud)
| 归档时间: |
|
| 查看次数: |
6310 次 |
| 最近记录: |