When it comes to logging users into my application, I am utilizing passport-local. The login process involves a function called in my AngularJS controller:
$http.post('/login', $scope.user).then(function (response){
if(response.data.success){
//Upon successful login, the user data is logged and they are redirected to the main page.
console.log(response.data.user);
$location.path(response.data.redirectTo);
} else {
// Handling error messages from Express routing.
}
});
Currently, everything works fine as expected. Upon successfully entering correct credentials, the user's data is logged and they are redirected to a new page.
My concern now is ensuring that all other pages confirm whether or not the user has logged in. How should I handle the received user data? The other pages use the following $routeProvider routing configuration:
app.config(['$routeProvider', function($routeProvider) {
$routeProvider.when('/login', {
templateUrl: 'login.html',
controller: 'loginCtrl'
});
$routeProvider.when('/home', {
templateUrl: 'home.html',
controller: 'homeCtrl',
// Implementing functionality to validate user login status
});
}])
All the tutorials I consulted suggest handling this via Express routing, but doing so results in a redirect loop due to /login omitting the isAuthenticated middleware check.
app.get('*', isAuthenticated, function(req,res){
res.sendFile("index.html");
});
function isAuthenticated(req,res,next){
if(req.isAuthenticated()){
next();
} else {
res.redirect('/login');
}
}
I would greatly appreciate any guidance on how to proceed from here.