April 2016
Beginner to intermediate
389 pages
9h 8m
Korean
Content preview from 한 권으로 끝내는 Node & Express: 웹사이트 구축을 위한 서버 사이드 자바스크립트
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
301
18
장
-
보안
이제 인증된 사용자만 계정 페이지
4
를 볼 수 있으며, 인증되지 않은 사용자는 ‘인증되지 않음’
페이지로 리다이렉트될 겁니다.
18.3.7.
역할 기반 승인
아직 우리는 승인이라 할 만한 작업은 하지 않고, 인증된 사용자와 인증되지 않은 사용자를 구
별하기만 했습니다. 이제 고객만 자신의 계정을 볼 수 있게 합시다(직원에게는 완벽히 다른 뷰
가 나타나서 사용자 계정 정보를 볼 수 있을 겁니다).
라우트 하나에 여러 함수를 놓고 순서대로 호출할 수 있음을 기억하십시오. 이제 고객만 허용
하는
customerOnly
함수를 만듭시다.
function customerOnly
(
req
,
res
,
next
){
if
(
req
.
user
&&
req
.
user
.
role
===
'
customer
')
return next
();
//
고객
전용
페이지를
만들어,
로그인해야
함을
알리고
싶습니다.
res
.
redirect
(
303
,
'/
unauthorized
');
}
조금 다르게 동작하는
employeeOnly
함수도 만듭시다. 직원에게만 보이는
/
sales
경로가 있다
고 합시다. 직원이 아닌 사람은, 설령 우연히 이 경로에 방문하더라도 그 존재조차 알 수 없게
해야 합니다. 잠재적 공격자가
/
sales
경로에 들어왔는데 ‘인증되지 않음’ 페이지를 보게 된다
면, 그런 페
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.