Passport.js: how to access user object after authentication?

Question

I'm using Passport.js to login a user with username and password. I'm essentially using the sample code from the Passport site. Here are the relevant parts (I think) of my code:

app.use(passport.initialize()); app.use(passport.session());  passport.serializeUser(function(user, done) {     done(null, user); });  passport.deserializeUser(function(obj, done) {     done(null, obj); });  passport.use(new LocalStrategy(function(username, password, done) {     User.findOne({ username: username }, function(err, user) {         if (err) {             return done(err);         }         if (!user) {             return done(null, false, { message: 'Incorrect username.' });         }         if (!user.validPassword(password)) {             return done(null, false, { message: 'Incorrect password.' });         }         return done(null, user);         });     } ));  app.post('/login',     passport.authenticate('local', { failureRedirect: '/login/fail', failureFlash: false }),     function(req, res) {         // Successful login         //console.log("Login successful.");         // I CAN ACCESS req.user here }); 

This seems to login correctly. However, I would like to be able to access the login user's information in other parts of the code, such as:

app.get('/test', function(req, res){     // How can I get the user's login info here?     console.log(req.user);  // <------ this outputs undefined }); 

I have checked other questions on SO, but I'm not sure what I'm doing wrong here. Thank you!

Answer 1

Late to the party but found this unanswered after googling the answer myself.

Inside the request will be a req.user object that you can work withr.

Routes like so:

app.get('/api/portfolio', passport.authenticate('jwt', { session: false }), stocks.buy); 

Controller like this:

buy: function(req, res) {       console.log(req.body);       //res.json({lel: req.user._id});       res.json({lel: req.user});     } 

Answer 2

In reference to the Passport documentation, the user object is contained in req.user. See below.

    app.post('/login',       passport.authenticate('local'),function(req, res) {        // If this function gets called, authentication was successful.        // `req.user` contains the authenticated user.        res.redirect('/users/' + req.user.username);      }); 

That way, you can access your user object from the page you redirect to.

In case you get stuck, you can refer to my Github project where I implemented it clearly.