未定义的req.session和req.session.user_id不起作用

我使用Express和节点进行会话pipe理。 我想使用express创build一个会话,以便在redirect到公用文件夹中的静态文件之前进行身份validation和会话。 以前我有一个问题麻烦使用express.session与https但它解决了通过在express.session中包含path作为/ public但现在我的req.session显示为未定义,但在浏览器中有connect.sid cookie存在

app.js是:

var express = require('express')TypeError: Cannot set property 'user_id' of undefined at /opt/expressjs/app.js:59:24 at callbacks; var http = require('http'); var https = require('https'); var fs = require('fs'); var mongo = require('mongodb'); var monk = require('monk'); var db = monk('localhost:27017/svgtest1'); var options = { key: fs.readFileSync('privatekey.pem'), cert: fs.readFileSync('certificate.pem') }; var app = express(); app.use(express.static(__dirname + '/public')); app.use(express.urlencoded()); app.use(express.json()); app.use(express.cookieParser()); app.use(express.session({cookie: { path: '/public/',httpOnly: false , maxAge: 24*60*60*1000}, secret: '1234567890QWERT'})); //middle ware to check auth function checkAuth(req, res, next) { if (!req.session.user_id) { res.send('You are not authorized to view this page'); } else { next(); } } app.get('/', function(req, res) { console.log('First page called'); res.redirect('loginform.html'); console.log('redirected'); res.end(); }); app.post('/login', function(req, res) { console.log('login called'); var usrfield = req.body.usrfield; var passfield = req.body.passfield; console.log(req.session); // Play with the username and password if (usrfield == 'kk' && passfield == '123') { req.session.user_id = 'xyz'; res.redirect('svg-edit.html'); } else { res.send('Bad user/pass'); } console.log(usrfield); console.log(passfield); res.end(); }); 

客户端 :

 <html> <style media="screen" type="text/css"> @import url("css/loginform_styles.css"); </style> <head> <script type="text/javascript" src="annotationTools/js/md5.js" ></script> <script> function validateForm() { var usrnamefield=document.forms["loginform"]["usrfield"].value; var passwrdfield=document.forms["loginform"]["passfield"].value; if ((usrnamefield==null || usrnamefield=="")||(passwrdfield==null || passwrdfield=="")) { document.getElementById('valueerrorlayer').innerHTML ='Username or password field is empty'; //document.forms["loginform"]["errorshow"].innerHtml = 'username or password empty'; return false; } else return true; } </script> </head> <body> <form name="loginform" id="loginform" action="https://localhost:8888/login" method="post" onsubmit="return validateForm()"> <div id = "content" align = "center"> <p align="center"><font size="7">LabelMe Dev</font></p> <br /> <br /> <label> Please Enter the <b><i>Username</i></b></label> <br /> <br /> <input type="text" name = "usrfield" id = "usrfield" onkeydown="if (event.keyCode == 13) document.getElementById('btnSearch').click()"/> <br /> <br /> <br /> <label> Please Enter the <b><i>Password</i></b></label> <br /> <br /> <input type="password" name = "passfield" id = "passfield" onkeydown="if (event.keyCode == 13) document.getElementById('btnSearch').click()"/> <br /> <br /> <br /> <i><p id='valueerrorlayer' style="color:red;"> </p></i> <input type="submit" value="Submit"/> </div> </form> </body> </html> 

问题是, console.log(req.session); 给未定义,所以req.session.user_id = 'xyz'; 也没有工作和错误'TypeError: Cannot set property 'user_id' of undefined at /opt/expressjs/app.js:59:24 at callbacks'来。 我经历了许多问题,但无法弄清楚。

我的网站是静态的,所有* .html位于公共目录中

会话中间件检查传入请求是否匹配cookiepath; 如果没有,它不会继续(甚至不会创buildreq.session )。 在你的情况下,你的cookiepath被设置为/public/ ,这不符合请求path/login

我想你会想configuration会话中间件cookie使用/作为一个path:

 app.use(express.session({ cookie: { path : '/', httpOnly: false, maxAge : 24*60*60*1000 }, secret: '1234567890QWERT' }));