Passport-Local适配Sequelize(MySQL)的登录认证配置修改咨询

Got it, let's get your Passport-Local setup working with Sequelize instead of Mongoose. I’ll walk you through adjusting your passport.js file step by step:

First, double-check you’ve imported the right modules and your Sequelize User model correctly. Here’s how to refactor your configuration:

1. Import Dependencies #

Start by pulling in Passport, the LocalStrategy, and your Sequelize User model (adjust the model path to match your project structure):

const passport = require('passport');
const LocalStrategy = require('passport-local').Strategy;
const User = require('../models/User'); // Update this path to your User model

2. Configure LocalStrategy #

The biggest difference from Mongoose is how Sequelize queries for users—we use the where clause to specify filters instead of passing the query object directly. Here’s the updated strategy:

passport.use(new LocalStrategy(
  { usernameField: 'username' }, // Swap to 'email' if you use email for login
  async (username, password, done) => {
    try {
      // Find user by username using Sequelize's findOne method
      const user = await User.findOne({ where: { username: username } });

      // Handle case where no user exists
      if (!user) {
        return done(null, false, { message: 'Incorrect username.' });
      }

      // Validate password (assuming your User model has a password check method)
      const isPasswordValid = await user.validPassword(password);
      if (!isPasswordValid) {
        return done(null, false, { message: 'Incorrect password.' });
      }

      // If all checks pass, return the user object
      return done(null, user);
    } catch (err) {
      return done(err);
    }
  }
));

3. Serialize & Deserialize Users #

Sequelize uses id (the default primary key) instead of Mongoose’s _id. Update these methods to use Sequelize’s lookup functions:

// Serialize user ID to store in the session
passport.serializeUser((user, done) => {
  done(null, user.id);
});

// Deserialize user from session ID
passport.deserializeUser(async (id, done) => {
  try {
    // Use findByPk for direct primary key lookup (or findOne with where clause)
    const user = await User.findByPk(id);
    done(null, user);
  } catch (err) {
    done(err);
  }
});

4. Password Hashing & Validation (Critical!) #

Make sure your Sequelize User model includes logic to hash passwords on save and validate them during login. Here’s a quick example using bcrypt:
In your User model file:

const bcrypt = require('bcrypt');

module.exports = (sequelize, DataTypes) => {
  const User = sequelize.define('User', {
    username: DataTypes.STRING,
    password: DataTypes.STRING
  });

  // Hash password before saving to database
  User.beforeCreate(async (user) => {
    const salt = await bcrypt.genSalt(10);
    user.password = await bcrypt.hash(user.password, salt);
  });

  // Method to compare input password with stored hash
  User.prototype.validPassword = async function(password) {
    return await bcrypt.compare(password, this.password);
  };

  return User;
};

5. Quick Final Checks #

• Confirm your Sequelize database connection is properly initialized and the User model is correctly exported.
• Ensure your login route is still using passport.authenticate('local') as you did with Mongoose—no changes needed there!

That should get your authentication flow working with Sequelize and MySQL.

内容的提问来源于stack exchange，提问作者Abhinav Jha