req.query

req.body

var session = require('express-session');
var cookieParser = require('cookie-parser');

app.use(cookieParser());
app.use(session({
  resave: true, // don't save session if unmodified
  saveUninitialized: false, // don't create session until something stored
  secret: 'admin', //密鑰
  name: 'testapp', //這里的name值得是cookie的name，默認cookie的name是：connect.sid
  cookie: {
    maxAge: 80000
  } //設置maxAge是80000ms，即80s后session和相應的cookie失效過期
}));

app.use(function(req, res, next) {
  if (!req.session.user) {
    if (req.url == "/login") {
      next(); //如果請求的地址是登錄則通過，進行下一個請求
    } else {
      res.redirect('/login');//跳轉到登錄頁面
    }
  } else if (req.session.user) {
    next();//如果已經(jīng)登錄，則可以進入
  }
});

app.get('/login', function(req, res) {
  res.render("login");
});
app.post('/login', function(req, res) {
  if (req.body) {//判斷時候有傳值
    var user = {
      'username': req.body.username//獲取用戶名并賦值，這里之前可以自己做判斷
    };
    req.session.user = user;//賦值session，自動跳轉頁面
    res.redirect('/admin');
  } else {
    res.redirect('/login');
  }
});
app.get('/logout', function(req, res) {//做的登出頁面
  req.session.user = null;
  res.redirect('/login');
});