Я разрабатываю сервер с использованием Loopback-passport-component для интеграции стороннего входа в систему как Google, Facebook.Но я всегда получаю обратный вызов Failure от Google после того, как пользователь войдет в свою учетную запись Google.
Вот мой код сервера:
'use strict';
var loopback = require('loopback');
var boot = require('loopback-boot');
var path = require('path');
var app = module.exports = loopback();
var bodyParser = require('body-parser');
var session = require('express-session');
var cookieParser = require('cookie-parser');
var flash = require('express-flash');
//create an instance of PassportConfigurator with the app instance
const PassportConfigurator = require('loopback-component-passport').PassportConfigurator;
const passportConfigurator = new PassportConfigurator(app);
app.middleware('initial', bodyParser.urlencoded({ extended: true }));
app.use('/express-status', function (req, res, next) {
res.json({ running: true });
});
//custom access token model
app.use(loopback.token({
model: app.models.AccessTokens,
currentUserLiteral: 'me'
}))
app.set('view engine', 'html');
app.set('views', __dirname + '/views');
//to support JSON encoded bodies
app.middleware('parse', bodyParser.json());
// to support URL-encoded bodies
app.middleware('parse', bodyParser.urlencoded({
extended: true
}));
//enable http session
app.middleware('session:before', cookieParser('MY SECRET'));
app.middleware('session', session({
secret: 'secret',
saveUninitialized: true,
resave: true
}))
//load the provider configurations
var config = {};
try {
config = require('../provider.json');
} catch (err) {
console.error('please configure your passport strategy in provider.json');
console.trace(err);
process.exit(1);
}
//Initialize passport
passportConfigurator.init();
// We need flash messages to see passport errors
app.use(flash());
var ensureLoggedIn = require('connect-ensure-login').ensureLoggedIn;
app.get('/auth/account', ensureLoggedIn('/login'), (req, res, next) => {
console.log('/auth/account');
console.log('user ', req.user);
res.json({ done: 'done auth account' });
})
app.get('/login', function (req, res, next) {
console.log('login')
res.json({ result: 'failure, redirec to login ' })
});
app.start = function () {
//Get the FQPN of the index file in client
var staticFolder = path.dirname(
path.resolve(__dirname, '..', app.get('indexFile'))
);
//set static folder as static in server
app.use(loopback.static(staticFolder));
passportConfigurator.setupModels({
userModel: app.models.Users,
userIdentityModel: app.models.userIdentity,
userCredentialModel: app.models.userCredential,
})
for (var s in config) {
var c = config[s];
c.session = c.session !== false;
passportConfigurator.configureProvider(s, c);
}
// start the web server
return app.listen(function () {
app.emit('started');
var baseUrl = app.get('url').replace(/\/$/, '');
console.log('Web server listening at: %s', baseUrl);
if (app.get('loopback-component-explorer')) {
var explorerPath = app.get('loopback-component-explorer').mountPath;
console.log('Browse your REST API at %s%s', baseUrl, explorerPath);
}
});
};
// Bootstrap the application, configure models, datasources and middleware.
// Sub-apps like REST API are mounted via boot scripts.
boot(app, __dirname, function (err) {
if (err) throw err;
// start the server if `$ node server.js`
if (require.main === module)
app.start();
});
А вот файл provider.json для определения конфигурации для Passport
{
"local":{
"provider":"local",
"module": "passport-local",
"usernameField": "email",
"passwordField": "password",
"authPath": "/api/users/auth/local",
"successRedirect": "/api/users/auth/account",
"failureRedirect": "/api/user/login",
"failureFlash": true,
"setAccessToken": true
},
"google-login": {
"provider": "google",
"module": "passport-google-oauth",
"strategy": "OAuth2Strategy",
"clientID": "my google client ID",
"clientSecret": "client secret",
"callbackURL": "/auth/google/callback",
"authPath": "/api/users/auth/google",
"callbackPath": "/auth/google/callback",
"successRedirect": "/auth/account",
"failureRedirect": "/login",
"scope": ["email", "profile"],
"failureFlash": true
},
"google-link": {
"provider": "google",
"module": "passport-google-oauth",
"strategy": "OAuth2Strategy",
"clientID": "my google client ID",
"clientSecret": "client secret",
"callbackURL": "/link/google/callback",
"authPath": "/link/google",
"callbackPath": "/link/google/callback",
"successRedirect": "/auth/account",
"failureRedirect": "/login",
"scope": ["email", "profile"],
"link": true,
"failureFlash": true
}
}
И я уже расширил некоторые встроенные модели, такие как User, AccessToken, UserIdentity и UserCredential
Users.json
{
"name": "Users",
"plural": "users",
"base": "User",
"idInjection": true,
"options": {
"validateUpsert": true
},
"restrictResetPasswordTokenScope": true,
"emailVerificationRequired": true,
"excludeBaseProperties": [
"realm"
],
"hidden": [
"password"
],
"properties": {
"name": {
"type": "string",
"required": true
},
"email": {
"type": "string",
"required": true
},
"password": {
"type": "string",
"required": true
},
"image_profile": {
"type": "string"
},
"gender": {
"type": "string"
},
"location": {
"type": "string"
},
"user_rank": {
"type": "number",
"required": true,
"default": 0
},
"is_third_party": {
"type": "boolean",
"required": true,
"default": false
},
"is_active": {
"type": "boolean",
"required": true,
"default": true
},
"created": {
"type": "date",
"required": true,
"defaultFn": "now"
},
"modified": {
"type": "date",
"required": true,
"defaultFn": "now"
}
},
"validations": [],
"relations": {
"accessTokens": {
"type": "hasMany",
"model": "AccessTokens",
"foreignKey": "userId",
"option": {
"disableInclude": true
}
},
"identities": {
"type": "hasMany",
"model": "userIdentity",
"foreignKey": "userId"
},
"credentials": {
"type": "hasMany",
"model": "userCredential",
"foreignKey": "userId"
}
},
"acls": [],
"methods": {}
}
userIdentity.json
{
"name": "userIdentity",
"plural": "user-identity",
"base": "UserIdentity",
"idInjection": true,
"options": {
"validateUpsert": true
},
"properties": {},
"validations": [],
"relations": {
"user": {
"type": "belongsTo",
"model": "Users",
"foreignKey": "userId"
}
},
"acls": [],
"methods": {}
}
userCredential.json
{
"name": "userCredential",
"plural": "user-credential",
"base": "UserCredential",
"idInjection": true,
"options": {
"validateUpsert": true
},
"properties": {},
"validations": [],
"relations": {
"user": {
"type": "belongsTo",
"model": "user",
"foreignKey": "userId"
}
},
"acls": [],
"methods": {}
}
Я также зарегистрировал свой домен в консоли Google.Но я всегда получал обратный звонок от Google на / логин маршрут.Он имеет конфигурацию в errorRedirect файла provider.json
Чего мне не хватает в моем коде.Как получить состояние успеха и получить информацию о пользователе