I am currently developing a shopping cart application using nodejs/expressjs. I have encountered an issue with redirecting back to the homepage ('/') after the user submits their credentials during sign up. Despite my search for relevant articles on this problem, I couldn't find any. Additionally, I have implemented CSURF protection. The problem arises when I click the submit button and the URL changes from
localhost:3000/user/signup/
to
localhost:3000/user/signup?email=something&password=somepassword&_csrf=QQdMG3kT-kOPAucSUipAlAUQaRSoLJrWlMQc
However, it fails to navigate back to the homepage (localhost:3000).
The following is the code snippet extracted from the index.js file:
var express = require('express');
var router = express.Router();
var Product = require('../models/product');
var csrf = require('csurf');
var csrfProtection = csrf();
/* GET home page. */
router.use(csrfProtection);
router.get('/', function(req, res, next) {
res.setHeader("Content-Type", "text/html");
Product.find(function(err, docs){
var productChunks = [];
chunkSize = 2;
for(var i = 0; i < docs.length; i+= chunkSize){
productChunks.push(docs.slice(i, i + chunkSize));
}
res.render('shop/index', { title: 'Humble', products: docs });
});
});
router.get('/user/signup', function(req, res, next){
res.render('user/signup', {csrfToken: req.csrfToken()});
});
router.post('/user/signup', function(req, res, next){
res.redirect('/');
});
module.exports = router;
Moreover, here is the code segment from the signup.hbs file:
<h1 class = "subtitlu"><b>Sign UP!</b></h1>
Validation Errors
<form action = "/user/signup" metod = "post"
style =
"box-shadow: 5px 10px 18px #888888;
font-family:Helvetica-Medium;
font-size:25px;
padding:25px;
margin-bottom:30px;
margin-top:30px;
overflow:hidden;">
<div class="form-group">
<label for="email">E-mail</label>
<input type="text" id="email" name="email" class="form-control">
</div>
<div class="form-group">
<label for="password">Parola</label>
<input type="password" id="password" name="password" class = "form-control">
</div>
<input type = "hidden" name = "_csrf" value = {{ csrfToken }}>
<button type = "submit" class = "btn btn-primary" style="background-color:rgb(0, 219, 66); position: relative;
float: right;">Create an account!</button>
</form>