Authentication Project: Secret Page App Part Two (Login/Logout)

Login Routes

Step One: Add login route

For login, we need to write a "/login" route to render to the login page.

At the same time, we need to create login page in the "view" folder.

Step Two: Set up the local strategy

Then, we need to set up the local strategy to be "user authenticate".

Step Three: Write post route and add middle-ware

Inside the app.post, we pass in "passport.authenticate", which is a middle-ware. It allows codes that run before our final route call back. When app gets a post request to "/login", it's going to run this code immediately.

Step Four: Run the app

We run the app and can see the login form.

Then, for every page, we add three links: sign up, login, and logout.

So the homepage will look like this:

Logout Routes

Logout routes are very simple.

We need to create a "/logout" route which will log user out and redirect to the homepage. When we log user out, we are not changing anything in the database. What is happening is that passport is destroying all user data in the session.

Then, we add a middle-ware to check if the user is logged in or not. The function "is loggedIn " takes three parameters: request, response and next.

If it is logged in, it's going to check the request authenticated. If it is, then return to next. The next will be the "secret" page.

At the end, we also need to add "is loggedIn" in the secret route. When a request comes in a Get request to "/secret", it's going to run "isloggedIn" function code before it does anything else.

That' all! It is a long process. At the end, we can sign up the page, and log in to the secret page and then log out.

Comments

GIT Study Note: Six Git Commands You Should Know!

What is Git? According to Git website , Git is a free and open source distributed version control system designed to handle everything from small to very large projects with speed and efficiency. Basically, we can use Git to track all of changes and revert them back if we made mistakes. The version control system is a way for us to work with different versions of our code, so that we can save different features and make notes as we progress. It is also very useful for team collaboration. Six Git Command You Should Know 1. Git Init In our server, we need to create a "Git" directory and inside of "Git", we make another direcory "git_inro". Then, we add a file "app,js" in the "git_intro" folder. The first thing we need to run is "git init" . When we run git init, it will make a directory which is hidden called ".git". Wherever I run that git init command, it's going to track all of our changes. ...

Intermediate Express.js: How To Render HTML From A EJS File?

The Express.js apps we have developed so far are just simply getting requests from users and sending matched message back to them. However, it is not what we want in the real web application. In most case, we want to send back a relevant web page when our app receives request from user. In order to do that, we need to npm install ejs file in the Express, create HTML page in the ejs file, and render HTMl from the ejs file. I know it sounds confuse now. I am going to explain more details in the example. EJS stands for embedded JavaScript. It lets us embed JavaScript code variables if statements loops inside of HTML. How to render HTML from a EJS file? Step One: Create a HTML page in EJS file Firstly, in our server, we create a folder named "EJSDemo". In this folder, we touch two files, one is "app.js", and the other one is "home.ejs". We are going to write a simple HTML code in the "home.ejs" file. The instructor create a dog page,...

Intro To Authentication: Three Useful Tools Will Make Everything Easier

Authentication is very important for both users and websites. It helps to keep users' information safe and also helps us to manage the accounts. Authentication is also complex because there is a lot of moving pieces that have to fit together in just the right way to make that work. The course introduce three tools to make authentication more quickly and safely. 1. Passport.js Passport.js will make our life easier and make our code shorter. It also helps to make implementation faster. Most importantly, it is used a lot in the real word. 2. Passport Local Passport Local is for username and password. It's about providing this entry point into all sorts of destinations. 3. Passport Local Mongoose This package will help us implement authentication with passport, and it's specially made to work with mongoose. We are also going to use these three tools into a Secret Page App project, which will show in next few posts.

Learn Bootcamp From Zero

Search This Blog