Beth Griggs
72 lines
1.7 KiB
JavaScript
72 lines
1.7 KiB
JavaScript
const express = require("express");
|
|
const bodyParser = require("body-parser");
|
|
const session = require("express-session");
|
|
const csurf = require("csurf");
|
|
const csrf = csurf();
|
|
const app = express();
|
|
|
|
const mockUser = {
|
|
username: "beth",
|
|
password: "badpassword",
|
|
email: "beth@example.com",
|
|
};
|
|
|
|
app.use(
|
|
session({
|
|
secret: "Node Cookbook",
|
|
name: "SESSIONID",
|
|
resave: false,
|
|
saveUninitialized: false,
|
|
cookie: { sameSite: true },
|
|
})
|
|
);
|
|
|
|
app.use(bodyParser.urlencoded({ extended: false }));
|
|
|
|
app.get("/", (req, res) => {
|
|
if (req.session.user) return res.redirect("/account");
|
|
res.send(`
|
|
<h1>Social Media Account - Login</h1>
|
|
<form method="POST" action="/">
|
|
<label> Username <input name=username> </label>
|
|
<label> Password <input name=password type=password> </label>
|
|
<input type=submit>
|
|
</form>
|
|
`);
|
|
});
|
|
|
|
app.post("/", (req, res) => {
|
|
if (
|
|
req.body.username === mockUser.username &&
|
|
req.body.password === mockUser.password
|
|
) {
|
|
req.session.user = req.body.username;
|
|
}
|
|
if (req.session.user) res.redirect("/account");
|
|
else res.redirect("/");
|
|
});
|
|
|
|
app.get("/account", csrf, (req, res) => {
|
|
if (!req.session.user) return res.redirect("/");
|
|
res.send(`
|
|
<h1>Social Media Account - Settings</h1>
|
|
<p> Email: ${mockUser.email} </p>
|
|
<form method="POST" action=/update>
|
|
<input type=hidden name=_csrf value="${req.csrfToken()}">
|
|
<input name=email value="${mockUser.email}">
|
|
<input type=submit value=Update >
|
|
</form>
|
|
`);
|
|
});
|
|
|
|
|
|
app.post("/update", csrf, (req, res) => {
|
|
if (!req.session.user) return res.sendStatus(403);
|
|
mockUser.email = req.body.email;
|
|
res.redirect("/")
|
|
});
|
|
|
|
app.listen(3000, () => {
|
|
console.log("Server listening on port 3000");
|
|
});
|