connect-ensure-login

const express = require('express'); const session = require('express-session'); const passport = require('passport'); const LocalStrategy = require('passport-local').Strategy; const { ensureLoggedIn } = require('connect-ensure-login'); const app = express(); // Basic session setup app.use(session({ secret: 'keyboard cat', // Replace with a strong, secret key from process.env resave: false, saveUninitialized: false, cookie: { secure: false } // Set to true if using HTTPS })); // Passport initialization app.use(passport.initialize()); app.use(passport.session()); // Dummy user storage for demonstration const users = [{ id: 1, username: 'testuser', password: 'testpassword' }]; passport.use(new LocalStrategy( function(username, password, done) { const user = users.find(u => u.username === username); if (!user || user.password !== password) { return done(null, false, { message: 'Incorrect username or password.' }); } return done(null, user); } )); passport.serializeUser(function(user, done) { done(null, user.id); }); passport.deserializeUser(function(id, done) { const user = users.find(u => u.id === id); done(null, user); }); // Routes app.get('/', (req, res) => { res.send(` <h1>Home</h1> <p>Welcome, ${req.user ? req.user.username : 'Guest'}!</p> <ul> <li><a href="/login">Login</a></li> <li><a href="/profile">Profile (protected)</a></li> <li>${req.user ? '<a href="/logout">Logout</a>' : ''}</li> </ul> `); }); app.get('/login', (req, res) => { res.send('<h1>Login</h1><form method="post" action="/login">Username: <input type="text" name="username"><br>Password: <input type="password" name="password"><br><button type="submit">Log In</button></form>'); }); app.post('/login', passport.authenticate('local', { failureRedirect: '/login' }), (req, res) => { res.redirect(req.session.returnTo || '/'); // Redirect after successful login delete req.session.returnTo; } ); app.get('/logout', (req, res) => { req.logout((err) => { if (err) { return next(err); } res.redirect('/'); }); }); // Protected route using ensureLoggedIn app.get('/profile', ensureLoggedIn('/login'), (req, res) => { res.send(`<h1>Profile</h1><p>Hello, ${req.user.username}!</p><a href="/">Home</a>`); }); app.listen(3000, () => { console.log('Server started on http://localhost:3000'); });