The double opt-in procedure has established itself as the standard for all types of registrations on the Internet in recent years. I will show you here what exactly is behind it and how you can integrate Double Opt-In into your Node.js application.

튜토리얼 노드.js 로그인 시스템

카탈로그

1. Double Opt-In의 장점

But attention: I cannot give a professional opinion on legal issues!

2. 설치 종속성

npm install nodemailer email-validator

3. MySQL 데이터베이스 구조 조정

Here again the hint: This tutorial is based on another tutorial from me: Node.js Login System with Express, JWT and MySQL (RestAPI)

4. 등록(/등록) 및 로그인(/로그인) 노선 조정

Unfortunately I can't give line numbers or highlighted lines here. 😔 For a clearer representation look at the post on my blog webdeasy.de.

// routes/router.js
router.post("/sign-up", userMiddleware.validateRegister, (req, res, next) => {
  db.query(
    `SELECT * FROM users WHERE LOWER(username) = LOWER(${db.escape(
      req.body.username
    )}) OR LOWER(email) = LOWER(${db.escape(req.body.email)});`,
    (err, result) => {
      if (result.length) {
        return res.status(409).send({
          msg: "This username or email is already in use!",
        });
      } else {
        // username is available
        bcrypt.hash(req.body.password, 10, (err, hash) => {
          if (err) {
            return res.status(500).send({
              msg: err,
            });
          } else {
            let email = req.body.email;
            let userID = uuid.v4();
            let token = uuid.v4();
            // has hashed pw => add to database
            db.query(
              `INSERT INTO users (id, username, email, password, registered, active, token) VALUES ('${userID}', ${db.escape(
                req.body.username
              )}, '${email}', ${db.escape(
                hash
              )}, now(), 0, '${token}')`,
              async (err, result) => {
                if (err) {
                  throw err;
                  return res.status(400).send({
                    msg: err,
                  });
                }
                await mailer.sendOptInMail(
                  email,
                  userID,
                  token
                );
                return res.status(201).send({
                  msg: "Registered!",
                });
              }
            );
          }
        });
      }
    }
  );
});

// routes/router.js
[...]
const mailer = require("../lib/mailer.js");
[...]

5. 이메일 주소 확인

// middleware/users.js
validateRegister: (req, res, next) => {
    // username min length 3
    if (!req.body.username || req.body.username.length < 3) {
      return res.status(400).send({
        msg: "Please enter a username with min. 3 chars",
      });
    }
    // valide email
    if (!req.body.email || !validator.validate(req.body.email)) {
      return res.status(400).send({
        msg: "Please enter a valid email address",
      });
    }
    // password min 6 chars
    if (!req.body.password || req.body.password.length < 6) {
      return res.status(400).send({
        msg: "Please enter a password with min. 6 chars",
      });
    }
    // password (repeat) does not match
    if (
      !req.body.password_repeat ||
      req.body.password != req.body.password_repeat
    ) {
      return res.status(400).send({
        msg: "Both passwords must match",
      });
    }
    next();
  },

6. 로그인 시 계정 활성화 확인

// routes/router.js
[...]
if (!result[0]["active"]) {
  return res.status(401).send({
    msg: "Your account is not activated!",
  });
}
[...]

7. 검증 경로 만들기(/검증)

// routes/router.js
router.get("/verify/:userID/:token", (req, res, next) => {
  let userID = req.params.userID;
  let token = req.params.token;
  db.query(
    `SELECT * FROM users WHERE id = ${db.escape(userID)}`,
    (err, result) => {
      // user does not exists
      if (err) {
        throw err;
        return res.status(400).send({
          msg: err,
        });
      }
      // no result from database
      if (!result.length) {
        return res.status(409).send({
          msg: "The requested parameters are incorrect!",
        });
      }
      // already activated
      if (result[0]["active"]) {
        return res.status(409).send({
          msg: "Account is already activated!",
        });
      }
      // wrong activation token
      if (result[0]["token"] !== token) {
        return res.status(401).send({
          msg: "The requested parameters are incorrect!",
        });
      }
      // set account active
      db.query(
        `UPDATE users SET active = 1 WHERE id = '${userID}'`,
        (err, result) => {
          if (err) {
            throw err;
            return res.status(400).send({
              msg: err,
            });
          }
          return res.status(200).send({
            msg: "Account activated",
          });
        }
      );
    }
  );
});

8. 확인 메일 보내기

// lib/mailer.js
const nodemailer = require("nodemailer");
let transporter = nodemailer.createTransport({
  host: process.env.MAIL_HOST,
  port: 465,
  secure: true,
  auth: {
    user: process.env.MAIL_USER,
    pass: process.env.MAIL_PASSWORD,
  },
  tls: {
    rejectUnauthorized: false,
  },
});

// lib/mailer.js
module.exports = {
  async sendOptInMail(email, userID, token) {
    let activationLink = `${process.env.BASE_URL}api/verify/${userID}/${token}`;
    let mail = {
      from: process.env.SENDER_MAIL,
      to: email,
      subject: "Please active your account",
      text: `To activate your account, please click this link: ${activationLink}`,
      html: `<p>To activate your account, please click this link: <a href="${activationLink}">${activationLink}</a></p>`,
    };
    await transporter.sendMail(mail);
  },
};

9. 테스트 이중 선택 가입