使用Express（样板）应用程序的everyauth

Question

我将尝试将Facebook登录集成到一个Express应用程序中（使用https://github.com/robrighter/node-boilerplate的Node样板代码）。

以下是server.js代码：

    //setup Dependencies
var connect = require('connect')
    , express = require('express')
    , io = require('socket.io')
    , port = (process.env.PORT || 3000)
    , conf = require('./conf')
    , everyauth = require('everyauth')
    , facebookGraphApi = require('Facebook_Graph_API');

//Set up express server
var server = express.createServer();

//everyauth helper method for express apps
everyauth.debug = true;

//setup everyauth
var usersById = {};
var nextUserId = 0;

function addUser (source, sourceUser) {
  var user;
  if (arguments.length === 1) { // password-based
    user = sourceUser = source;
    user.id = ++nextUserId;
    return usersById[nextUserId] = user;
  } else { // non-password-based
    user = usersById[++nextUserId] = {id: nextUserId};
    user[source] = sourceUser;
  }
  return user;
}

var usersByFbId = {};

everyauth.everymodule
  .findUserById( function (id, callback) {
    callback(null, usersById[id]);
  });

//<-- this has to go before the server configure
everyauth
  .facebook
    .appId(conf.fb.appId)
    .appSecret(conf.fb.appSecret)
    .findOrCreateUser( function (session, accessToken, accessTokenExtra, fbUserMetadata) {
      return usersByFbId[fbUserMetadata.id] ||
        (usersByFbId[fbUserMetadata.id] = addUser('facebook', fbUserMetadata));
    })
    .redirectPath('/');//note that this can be some other path than /

everyauth.helpExpress(server);

//configure express server
server.configure(function(){
    server.set('views', __dirname + '/views');
    server.set('view options', { layout: false });
    server.use(connect.bodyParser());
    server.use(express.cookieParser());
    server.use(everyauth.middleware());
    server.use(express.session({ secret: "shhhhhhhhh!"}));
    server.use(connect.static(__dirname + '/static'));
    server.use(server.router);
});

//setup the errors
server.error(function(err, req, res, next){
    if (err instanceof NotFound) {
        res.render('404.jade', { locals: { 
                  title : '404 - Not Found'
                 ,description: ''
                 ,author: ''
                 ,analyticssiteid: 'XXXXXXX' 
                },status: 404 });
    } else {
        res.render('500.jade', { locals: { 
                  title : 'The Server Encountered an Error'
                 ,description: ''
                 ,author: ''
                 ,analyticssiteid: 'XXXXXXX'
                 ,error: err 
                },status: 500 });
    }
});

//start the server
server.listen(port);

//Setup Socket.IO
var io = io.listen(server);
io.sockets.on('connection', function(socket){
  console.log('Client Connected');
  socket.on('message', function(data){
    socket.broadcast.emit('server_message',data);
    socket.emit('server_message',data);
  });
  socket.on('disconnect', function(){
    console.log('Client Disconnected.');
  });
});



///////////////////////////////////////////
//              Routes                   //
///////////////////////////////////////////

/////// ADD ALL YOUR ROUTES HERE  /////////

server.get('/', function(req,res){
  res.render('index.jade', {
    locals : { 
              title : 'Promenade'
             ,description: 'Prom utilities'
             ,author: 'A Friday Lab production'
             ,analyticssiteid: 'XXXXXXX' 
            }
  });
});

server.get('/receiveToken', function(req, res){
    //once you have received the token, connect to the graph and get some data.
    var FB_ID = 'me';
    var ACCESS_TOKEN = 'test';
    var graph = new facebookGraphApi();
    var facebookUser = new graph.User(FB_ID,ACCESS_TOKEN);
});

//A Route for Creating a 500 Error (Useful to keep around)
server.get('/500', function(req, res){
    throw new Error('This is a 500 Error');
});

//The 404 Route (ALWAYS Keep this as the last route)
server.get('/*', function(req, res){
    throw new NotFound;
});

function NotFound(msg){
    this.name = 'NotFound';
    Error.call(this, msg);
    Error.captureStackTrace(this, arguments.callee);
}


console.log('Listening on http://0.0.0.0:' + port );

这是我的jade视图：

block content
    div
        a(id='sender')='Send a Message'
        ul(id='reciever')
    div
        - if (!everyauth.loggedIn)
            h2 Not Authenticated
            #fb-login.fb_button(style='background-position: left -188px')
            a.fb_button_medium(href='/auth/facebook')
                span#fb_login_text.fb_button_text
                Connect with Facebook
        - else
            h2 Authenticated
            - if (everyauth.facebook)
                h3 Facebook User Data
                p= JSON.stringify(everyauth.facebook.user)
                p= 'facebook access token is '+ everyauth.facebook.accessToken
            h3
                a(href='/logout') Logout

然而，当我启动Web应用并单击“使用Facebook连接”链接时，我的应用程序崩溃，并且出现以下错误：

facebook的getSession步骤是承诺：session; 但是，该步骤未返回任何内容。通过返回预期的值或承诺这些值的Promise来修复该步骤。

我怀疑认证正在工作，因为我被重定向到此URL：

=">http://localhost:3000/auth/facebook/callback?code=AQC1WKuD8Og_I0QWMUn9OzDy7hLdHip6DkWI2DgbG0yOgnPXkAJ2yMCWecjo7AfSfPcGFCc9nXIHPAqIZcb779WFT-NNCgKBFyoHu-Urq5fpgPfJgXC8QCJhcgmteXmh-VIgMKRGJnfKObMW2lvLFWQrnUjEBs3HveZjV1MecuhUr4MqIUPv6K3Kb2hCKpHDS0g#=

看起来像某种访问令牌。

我认为这不是local.host与localhost的问题，因为everyauth示例在localhost:3000中运行良好。

谢谢！

（另外，如果有人能解释为什么我的问题被投票下降，我会尝试在将来改进我的问题）

- ejang

---

这是一个非常长的代码示例，供试图回答您问题的人参考。尝试创建最小可能的代码量，但仍然存在错误。这样做不仅可以更容易地回答自己的问题，还可能会自己解决问题！ - mikemaccana

Answer 1

这里可能出现了几个问题；但我首先尝试的是将express.session移动到everyauth.middleware之前，并在express.cookieParser之后。

- Charles Short