将带有OIDC的express server部署到Azure应用程序服务时出现端口错误

Question

我正在尝试将服务器部署到azure应用程序服务。服务器代码可以在下面找到。

我从日志流中得到的错误是：

2020-11-18T23:36:06.088Z错误-容器[容器名称]未响应端口8080上的HTTP ping，站点启动失败。有关调试，请参阅容器日志。

我把端口设置为8080，我知道配置正在恢复，因为我可以在日志中看到“服务器监听端口8080”。我已经尝试改变WEBSITES_PORT80和8080，因为我看到其他职位，但我认为我的问题是不同的。

这个网站在我使用OIDC库添加授权之前工作。

该应用程序在本地使用下面的服务器代码工作。

const https = require('https')

const express = require('express')
const path = require('path')
const app = express()
const fs = require('fs')

const key = fs.readFileSync('./key.pem')
const cert = fs.readFileSync('./cert.pem')

require('dotenv').config()
app.use(express.json())
app.use(express.urlencoded({
  extended: true
}))
app.use(express.static('express'))
var cors = require('cors')
const OktaJwtVerifier = require('@okta/jwt-verifier')
const session = require('express-session')
const {
  ExpressOIDC
} = require('@okta/oidc-middleware')

var getUserInfo = require('./getUserInfo')

// session support is required to use ExpressOIDC
app.use(
  session({
    secret: 'this should be secure',
    resave: true,
    saveUninitialized: false,
    cookie: {
      httpOnly: false,
      secure: true,
    },
  })
)

const oidc = new ExpressOIDC({
  issuer: process.env.ISSUER || 'https://[custom auth server domain].gov/oauth2/default',
  client_id: process.env.CLIENT_ID || 'xxxxxxxxxxxxxxxxx',
  client_secret: process.env.CLIENT_SECRET || 'xxxxxxxxxxxxxxxxxx',
  redirect_uri: process.env.REDIRECT_URI ||
    'https://localhost:3000/authorization-code/callback',
  appBaseUrl: process.env.APP_BASE_URL || 'https://localhost:3000',
  scope: 'openid profile',
})

// ExpressOIDC attaches handlers for the /login and /authorization-code/callback routes
app.use(oidc.router)

app.use(cors())
app.options('*', cors())
app.get('/userinfo', (req, res) => {
  let domain = 'dev'

  if (req.isAuthenticated()) {
    getUserInfo.userRequest(res, req.userContext, domain)
  }
})

app.get('/authStatus', (req, res) => {
  if (req.isAuthenticated()) {
    res.send(req.userContext.userinfo)
  }
})

app.post('/forces-logout', oidc.forceLogoutAndRevoke(), (req, res) => {
  // Nothing here will execute, after the redirects the user will end up wherever the `routes.logoutCallback.path` specifies (default `/`)
})

var linkObj = {not relevant links used hrefs on html based on env}

// default URL for website
app.get('/', function(req, res) {
  res.sendFile(path.join(__dirname + '/express/index.html'))
  //__dirname : It will resolve to your project folder.
})

// FAQ Path
app.get('/help', function(req, res) {
  res.sendFile(path.join(__dirname + '/express/help.html'))
  //__dirname : It will resolve to your project folder.
})

app.get('/links', (req, res) => {
  res.json(linkObj)
})

app.post('/forces-logout', oidc.forceLogoutAndRevoke(), (req, res) => {
  // Nothing here will execute, after the redirects the user will end up wherever the `routes.logoutCallback.path` specifies (default `/`)
})

// default URL for website
app.get('*', function(req, res) {
  res.sendFile(path.join(__dirname + '/express/index.html'))
  //__dirname : It will resolve to your project folder.
})

const port = normalizePort(process.env.PORT || '3000')
if (process.env.PORT) {
  const server = https.createServer(app)
  server.listen(port)
} else {
  const server = https.createServer({
    key: key,
    cert: cert
  }, app)
  server.listen(port)
}

console.debug('Server listening on port ' + port)

function normalizePort(val) {
  var port = parseInt(val, 10)

  if (isNaN(port)) {
    // named pipe
    return val
  }

  if (port >= 0) {
    // port number
    return port
  }

  return false
}

Answer 1

我相信这句话可能会给你带来问题：

const port = normalizePort(process.env.PORT || '3000')

我会尝试将其更改为：

const port = normalizePort(process.env.PORT || '8080')

您还需要更改这些行以获得公共URL，而不是localhost：

  redirect_uri: process.env.REDIRECT_URI ||
    'https://localhost:3000/authorization-code/callback',
  appBaseUrl: process.env.APP_BASE_URL || 'https://localhost:3000',

更改这些后，您需要将Okta上的应用程序更新为生产重定向URI。