Passport js not sending req.user object while redirecting

Working with Data
,
1

I’m trying to build an authentication system with passport-local. I got the initial starter code from here: Easy Node Authentication: Setup and Local | DigitalOcean

When I try console.log(req.user) , it gets logged successfully, meaning that passport does return req.user. However, when redirecting to the logged-in route, req.user becomes undefined. How can I get req.user to be sent to my logged-in route? Here is my code.

Frontend request:

const serverResponse = fetch('http://localhost:5000/api/client/signin', {
    method: 'POST',
    headers: {
      'Content-Type': 'application/json'
    },
    body: JSON.stringify(x)
  })
  .then((res)=> {
    if (res.user) {
      alert('Sign in successful.')
      return res.user
    } else {
      alert('Try again.')
    }})
  .catch((err)=> {
    alert(`Error: ${err}`)
  })

Backend sign-in route:

router.post('/signin', passport.authenticate('local-login', {
  successRedirect: '/api/client/profile',
  failureRedirect: '/api/client/signin',
  failureFlash: true
}))

Passport js login config file:

passport.use('local-login', new LocalStrategy({
    usernameField: 'email',
    passwordField: 'password',
    passReqToCallback: true // allows us to pass back the entire request to the callback
  },
    function(req, email, password, done) {
      // find a user whose email is the same as the forms email
      UserModel.findOne({
        email: req.body.email
      }, function(err,
        user) {
        // if there are any errors,
        if (err)
          return done(err);
        // if no user is found,
        if (!user) {
          console.log('That account does not exist!')
          return done(null, false, req.flash('loginMessage', 'No user found.'));
        }
        // if the password is wrong
        if (user.password != password) {
          console.log('Wrong password!')
          return done(null, false, req.flash('loginMessage', 'Oops! Wrong password.'));
        }

        // all is well, return successful user
        return done(null, user);
      });
    }));

Logged-in check

function loggedIn(req, res, next) {
  if (req.user) {
    console.log(`User: found.`)
    return next();
  } else {
    console.log('No user object.')
  }
}

Finally, logged-in route

router.get('/profile', loggedIn, (req, res) => {
  console.log('User logged in.')
  console.log(`${req.user}`)
  res.send(req.user)
})
````Preformatted text`
2

Node.js will authenticate every request that comes in. That is why you added passport.authenticate('local-login', to the “/signin” endpoint. At that moment user got authenticated as you said.

BUT, when you do the redirection, Node.js see that as another request. So, in order for user to authenticate again, you need to add authentication on “/profile” endpoint as well.

Usually, when user authenticate with basic authentication (email + password), you can create JWT that you will store in every next request. Then, you can use passport-jwt package to implement JWT Strategy and authenticate user based on JWT that you created after basic authentication.

3

Can MongoStore play JWT’s role?