passport deserializeUser

'use strict'

var express = require('express');
var app = express();

var session = require('express-session');


var passport = require('passport');
var bodyParser = require('body-parser');
var LocalStrategy = require('passport-local').Strategy;

var cookieParser = require('cookie-parser');

// Use the session miaddleware
//app.use(session({ 
//    secret: makerandstr(), 
//    resave: false,
//    saveUninitialized:true,
//    cookie: { maxAge: 60000 }
//}));

app.use(cookieParser());
app.use(bodyParser());
app.use(session({ secret: makerandstr() }));
app.use(passport.initialize());
app.use(passport.session());


function makerandstr() {
  var text = "";
  var possible = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789";

  for (var i = 0; i < 5; i++)
    text += possible.charAt(Math.floor(Math.random() * possible.length));

  return text;
}

var users;
var jsonfile = require('jsonfile');


// read data.json
function readdata() {
    var file = './users.json';
    users = jsonfile.readFileSync(file);
}
readdata();

function checkuser(username, password, done) {
    readdata();
    if (users[username] && users[username]["password"] == password) {
        done(null, username);
    } else {
        done(null, null);
    }
}

// var express = require('express')();
app.use(bodyParser.urlencoded({ extended: false }));
passport.use(new LocalStrategy(function(username, password, done) 
{
    checkuser(username, password, done);
}));

var auth = passport.authenticate('local', {session:true,failureRedirect:"/"});


app.get('/', function(req, res) {
    var sess = req.session;
    if (sess.login == true) {
        res.send('<h1><a href="logout">Logout</a></h1>'+req.user);
    }else {
        res.send('<form action="/auth" method="post"><input type="text" name="username"><input type="password" name="password"><input type="submit" value="submit"></form>');
    }
})

// Serilize authenticated user into the request so they can access callback functions
passport.serializeUser(function(user, done) 
{
  done(null, user);
});
// deserilize authonticated user so the callback function can read thier data
passport.deserializeUser(function (user, done) {

        done(err, user);
    });
});

app.post('/auth',auth,function(req,res)
{
    res.redirect(302, '/');
});

app.get('/accessdenied',function(req,res)
{
    res.send("access denied");
});

app.get('/logout', function(req, res) {
    var sess = req.session;
    sess.login = null;
    res.redirect(302, '/');
});

app.get('/secret',auth, function(req, res) {
    res.send("ok");
});

app.listen(3000);