node.js – NodeJS ExpressJS PassportJS – 仅适用于管理员页面

我使用NodeJS,Expressjs,Mongoose,passportJS&连接 – 确保登录.验证用户工作完美. @H_673_5@ @H_673_5@

....
var passport = require('passport'),LocalStrategy = require('passport-local').Strategy,ensureLoggedIn = require('connect-ensure-login').ensureLoggedIn;

var app = express();
...
app.use(passport.initialize());
app.use(passport.session());    
...


passport.use(new LocalStrategy({usernameField: 'email',passwordField: 'password'},function(email,password,donE) {
  User.findOne({ 'email': email,'password': password },{'_id': 1,'email':1},function(err,user) {

    if (err) { return done(err); }

    if (!user) {
      return done(null,false,{ message: 'Incorrect username.' });
    }

    return done(null,user);
  });
}));

passport.serializeUser(function(user,donE) {
  done(null,user);
});

passport.deserializeUser(function(user,donE) {  
  done(null,user);
});

app.post('/login',passport.authenticate('local',{ successReturnToOrRedirect: '/home',failureRedirect: '/login' }));

app.get('/logout',function(req,res){
  req.logout();
  res.redirect('/');
});

@H_673_5@现在,我想对某些路由添加限制,只能由admin访问.我怎样才能做到这一点？例如/管理/ *

@H_673_5@

var scheR_997_11845@a = new mongoose.scheR_997_11845@a({
    name: String,email: String,password: String,isAdmin: { type: Boolean,default: false }
});

mongoose.model('User',scheR_997_11845@a);

@H_673_5@任何提示？谢谢

var ensureLoggedIn = require('connect-ensure-login').ensureLoggedIn;
...
var requiresAdmin = function() {
  return [
    ensureLoggedIn('/login'),res,next) {
      if (req.user && req.user.isAdmin === truE)
        next();
      else
        res.send(401,'Unauthorized');
    }
  ]
};

app.all('/admin/*',requiresAdmin());
app.get('/admin/',...);