多次刷新时，NodeJS Express req[user]未定义

Question

我的问题类似于这个。我正在使用express版本4.14.0，并使用"passport-ping"模块实现了OAuth2 SSO。为了从成功登录时拥有的刷新令牌获取新的访问令牌，我正在使用"passport-oauth2-refresh"模块。这些模块没有任何问题，一切都按预期工作。但问题在于request.user对象。以下是我的代码：

var express = require('express');
var async = require('async');
var cookieParser = require('cookie-parser');
var request = require('request');
var passport = require('passport');
var OAuth2Strategy = require('passport-ping').Strategy;
var refresh = require('passport-oauth2-refresh');
var session = require('express-session');
var bodyParser = require('body-parser');
var Client = require('node-rest-client').Client;
var client = new Client();
var _outputpath = "/build",
_templatePath = "./templates";

var app = express();

app.use(express.static(__dirname + "/"));
app.use(cookieParser());
app.use(bodyParser.json());
app.use(bodyParser.urlencoded({ extended: true }));
app.use(session({
secret: "session secret",
resave: true,
saveUninitialized: true
}));
app.use(passport.initialize());
app.use(passport.session());

var port = process.env.port || 8080;

// Allow cross orgin
app.all('*', function (req, res, next) {
res.setHeader('Access-Control-Allow-Origin', '*');
res.setHeader('Access-Control-Allow-Methods', 'GET, POST, PUT, DELETE');
res.setHeader('Access-Control-Allow-Headers', 'Origin, Content-Type, X-Auth-Token');
res.setHeader('Access-Control-Allow-Credentials', true);
if (req.method === 'OPTIONS') {
    res.status(200);
    res.end();
} else {
    next();
}
});

passport.serializeUser(function (user, done) {
done(null, user);
});

passport.deserializeUser(function (id, done) {
done(null, id);
});

var strategy = new OAuth2Strategy({
authorizationURL: 'xxx',
tokenURL: 'xxx',
clientID: 'xxx',
clientSecret: 'xxx',
callbackURL: 'http://localhost:8080'
},
function (accessToken, refreshToken, profile, done) {
    done(null, { accessToken: accessToken, refreshToken: refreshToken });
}
);

passport.use('oauth-provider', strategy);
refresh.use('oauth-provider', strategy);

var isAuthenticated = function (req, res, next) {
if (req.isAuthenticated()) {
    return next();
} else {
    res.redirect('/');
}
}

/***************** GET BASE PAGE ************/
app.get('/guide', isAuthenticated, function (req, res) {
async.series({
    one: function (callback) {
    newAccessToken(req, res, true, function (reqQuery) {        
        var _reqQuery = reqQuery;
        res.cookie('userAccessToken', req["user"].refreshToken, { maxAge: 1 * 24 * 3600000, httpOnly: false });
        res.sendFile(__dirname + _outputpath + '/index.html');
        callback(null, req["user"]);
    })
    },
    two: function (callback) {
    callback(null, 2);
    }
},
    function (err, results) {
    console.log('Completed Guide Page');
    });
});

app.get('/', passport.authenticate('oauth-provider', {
successRedirect: '/guide',
failureRedirect: '/error',
pfidpadapterid: 'OAuthAdapterCCDS'
})
);

function newAccessToken(req, res, isParent, callback) {
refresh.requestNewAccessToken('oauth-provider', req["user"].refreshToken, function (err, accessToken, refreshToken) {
    var expireAccessToken = new Date();
    expireAccessToken.setMinutes(expireAccessToken.getMinutes() + 59);
    req["user"].refreshToken = refreshToken;
    req["user"].accessToken = accessToken;
    req["user"].accessTokenTime = new Date();
    req["user"].expireAccessToken = expireAccessToken;
    callback(req);
});
}

/***************** START THE SERVER ************/
app.listen(port, function () {
console.log('Server started & listening on port: ' + port);
});

在成功登录后，OAuth2Strategy的完成功能会向req.user添加以下对象。

{ accessToken: accessToken, refreshToken: refreshToken }

在每个请求中，我都会调用newAccessToken函数来获取我们拥有的刷新令牌的新访问令牌，并手动更新req.user对象的新访问令牌和刷新令牌，如下所示。是否有更好的方法来更新req["user"]？

req["user"].refreshToken = refreshToken;
req["user"].accessToken = accessToken;
req["user"].accessTokenTime = new Date();
req["user"].expireAccessToken = expireAccessToken;

如果用户从浏览器不断刷新，我的req.user会变成未定义。我看过论坛上的一些内容，尝试了几个方法，但都没有成功。非常感谢您提供的帮助。

- ShaMoh

---

有更新吗？我遇到了类似的情况。 - Psyche Genie

@PsycheGenie 在我的情况下，我没有正确处理错误，这是导致我面临问题的原因。 - ShaMoh

Answer 1

在获取新的访问令牌时，我没有正确处理错误。我将新的访问令牌函数更改为以下内容：

function newAccessToken(req, res, isParent, callback) {
refresh.requestNewAccessToken('oauth-provider', req["user"].refreshToken, function (err, accessToken, refreshToken) {
    var expireAccessToken = new Date();
    expireAccessToken.setMinutes(expireAccessToken.getMinutes() + 59);
    req["user"].refreshToken = refreshToken;
    req["user"].accessToken = accessToken;
    req["user"].accessTokenTime = new Date();
    req["user"].expireAccessToken = expireAccessToken;
    callback(req);
});
}

- ShaMoh