Express 4.x中connect-flash结合EJS使用故障排查求助

Hey there, let's figure out why your connect-flash setup isn't working. From the code snippet you shared, it looks like you've got the right pieces in place, but there are a few common pitfalls that might be tripping you up. Let's break this down step by step.

First: Fix Your Global Variables Middleware #

Your code cuts off at app.use(function (req, res, nex... — I bet you missed finishing that middleware, which is critical because it's how you make flash messages available to your EJS templates. You need to mount flash messages to res.locals (the object that EJS has access to by default). Here's what that should look like:

app.use(function(req, res, next) {
  // Make flash messages accessible in all EJS templates
  res.locals.success_msg = req.flash('success_msg');
  res.locals.error_msg = req.flash('error_msg');
  res.locals.error = req.flash('error'); // For general errors
  next(); // Don't forget to call next() to pass control to the next middleware!
});

Critical Check: Middleware Order #

Express runs middleware in the order you define them — this is super important. Your middleware stack must follow this exact sequence:

1. cookieParser()
2. session()
3. flash()
4. Your global variables middleware (the one above)
5. Your routes

If you've placed routes before any of these, flash messages won't be available to them. Double-check your code's order!

Verify Session is Working #

Connect-flash relies on express-session to store messages, so if your session isn't functioning, flash won't either. Test your session with a quick route:

app.get('/test-session', (req, res) => {
  if (req.session.test) {
    res.send(`Session works! Value: ${req.session.test}`);
  } else {
    req.session.test = 'Hello from session!';
    res.send('Session initialized, refresh the page to see it persist.');
  }
});

Visit /test-session, refresh, and if you see the persisted value, your session is working. If not, check your session configuration (maybe your secret is missing, or cookie settings are off).

Correctly Use Flash in Routes #

You need to set flash messages before redirecting — if you render a template immediately after setting a flash message, the message won't be available in that request's res.locals. Here's the right way:

// Example: Failed login route
app.post('/login', (req, res) => {
  // Assume authentication fails
  req.flash('error_msg', 'Invalid username or password');
  res.redirect('/login'); // Redirect, don't render!
});

// Example: Successful form submission
app.post('/register', (req, res) => {
  req.flash('success_msg', 'Account created successfully!');
  res.redirect('/dashboard');
});

Render Flash Messages in EJS #

Make sure your EJS template is checking for the flash variables you defined in the global middleware. For example, in your login.ejs or layout.ejs:

<!-- Display error messages -->
<% if (error_msg) { %>
  <div class="alert alert-danger">
    <%= error_msg %>
  </div>
<% } %>

<!-- Display success messages -->
<% if (success_msg) { %>
  <div class="alert alert-success">
    <%= success_msg %>
  </div>
<% } %>

Double-check for typos here — if you named the variable success_msg in the middleware but wrote successMessage in EJS, it won't show up.

Bonus: Update Dependencies (If Needed) #

Occasionally, version mismatches between express-session, connect-flash, and cookie-parser can cause issues. Update them to the latest compatible versions:

npm install express-session@latest connect-flash@latest cookie-parser@latest

Full Working Configuration Example #

Here's a complete, minimal setup to compare against your code:

const express = require('express');
const cookieParser = require('cookie-parser');
const session = require('express-session');
const flash = require('connect-flash');
const app = express();

// Set EJS as view engine
app.set('view engine', 'ejs');

// Middleware Stack (Order Matters!)
app.use(cookieParser());
app.use(session({
  secret: 'your-strong-secret-key', // Use an environment variable in production!
  resave: false,
  saveUninitialized: false,
  cookie: { 
    secure: false, // Set to true if using HTTPS
    maxAge: 24 * 60 * 60 * 1000 // 1 day expiry
  }
}));
app.use(flash());

// Global variables for EJS
app.use((req, res, next) => {
  res.locals.success_msg = req.flash('success_msg');
  res.locals.error_msg = req.flash('error_msg');
  next();
});

// Routes
app.get('/', (req, res) => {
  res.render('index'); // Renders views/index.ejs
});

app.post('/test-flash', (req, res) => {
  req.flash('success_msg', 'Flash message works!');
  res.redirect('/');
});

app.listen(3000, () => {
  console.log('Server running on http://localhost:3000');
});

Go through these checks one by one — odds are one of these steps will fix your issue!

内容的提问来源于stack exchange，提问作者Mert