CODEWITHSUNDEEP
javascriptnode.jssessionexpressrequest
Jaro
Jaro

Reputation: 1687

How to save data in expressjs/session NodeJS

I have 3 files : app.js, index.js(routes), Users.js(controller)

Once my user is loggedIn (verification done between POST information and DB) i want to save data in a session using expressjs/session.

Here is the declaration of my session in the app.js : 

var session = require('express-session');

    app.use(session({
        resave: true,
        saveUninitialized: true,
        secret: 'trolololo'
    }));

Here are my routes :

router.post('/login', function(req, res, next) {
    Users.login(req, res);
});

router.get('/getSessionInfos', function(req,res,next){
    console.log(req.session);
});

And here is the controller for the login :

login : function(req, res){
        var formEmail = req.body.email;
        var formPassword = req.body.password;

        User.findOne({ where: {email: formEmail} }).then(function(user) {
            if(user){
              if (user.password == formPassword){
                  console.log('User connected');
                  req.session.email = formEmail;
                  req.session.password = formPassword;
                  console.log(req.session);
                  res.status(200).send('User Authentified');
              }else{
                  res.status(401).send('Invalid Password');
              }
          }else{
              res.status(401).send('Username');
          }
        });
    },

The Login works I get the 200 status and my console.log in the login function displays a function with my infos. But when i try fetching my session from the /getSessionInfos URL it is empty... Please send help

Upvotes: 2

Views: 13585

Answers (3)

Kunal Khelkar
Kunal Khelkar

Reputation: 1

//Your Code seems correct only some changes

app.use(session({
secret : 'yourSecret',`enter code here`
resave : false,
saveUninitialized : false,
}));



//in login details save the session by using "req.session.save();" 
//then try to run it work properly


login : function(req, res){
        var formEmail = req.body.email;
        var formPassword = req.body.password;

        User.findOne({ where: {email: formEmail} }).then(function(user) {
            if(user){
              if (user.password == formPassword){
                  console.log('User connected');
                  req.session.email = formEmail;
                  req.session.password = formPassword;
                   req.session.save();
                  console.log(req.session);
                  res.status(200).send('User Authentified');
              }else{
                  res.status(401).send('Invalid Password');
              }
          }else{
              res.status(401).send('Username');
          }
        });
    },

Upvotes: 0

Remario
Remario

Reputation: 3863

I know you did not ask this, but i will state it either way, sessions are not recommended in node any more, json web tokens are pretty much the at the throne.In essence it's a signed piece of data in JSON format. Because it's signed the recipient can verify its authenticity. Because it's JSON it weights very little.

In very simple terms, JWT are cool because you don't need to keep session data on the server in order to authenticate the user.

  • The user calls authentication service, usually sending username and password.
    • The authentication service responds with a signed JWT, which says who the user is.
    • The user requests access to a secured service sending the token back.
    • Security layer checks the signature on the token and if it's genuine the access is granted.

You can use jwt-simple in npm.

Upvotes: 1

Yash Ganatra
Yash Ganatra

Reputation: 468

Your Code seems correct only some changes 

app.use(session({
secret : 'yourSecret',
resave : false,
saveUninitialized : false,
}));

Not forget to login first as you are storing the session value over there and then it will surely display the object with the email and password key . Let me know if You face any problem.

Upvotes: 0

Related Questions