Hello ${cert.subject.CN}, your certificate was issued by ${cert.issuer.CN}!
`) // They can still provide a certificate which is not accepted by us. Unfortunately, the `cert` object will be an empty // object instead of `null` if there is no certificate at all, so we have to check for a known field rather than // truthiness. } else if (cert.subject) { res.status(403).send(`Sorry ${cert.subject.CN}, certificates from ${cert.issuer.CN} are not welcome here.`) // And last, they can come to us with no certificate at all: } else { res.status(401).send(`Sorry, but you need to provide a client certificate to continue.`) } res.end() }) appHttps.get('/fakeResource', (req, res) => { res.set("Content-Type", "text/javascript") res.send(`alert("HI");`) res.end() }) // Let's create our HTTPS server and we're ready to go. https.createServer(options, appHttps).listen(4433) // Ensure this is before any other middleware or routes appAuthBasic.use((req, res, next) => { let user = auth(req) if (user === undefined || user['name'] !== 'user 1' || user['pass'] !== 'password 1') { res.statusCode = 401 res.setHeader('WWW-Authenticate', 'Basic realm="Node"') res.end('Unauthorized') } else { next() } }) appAuthBasic.get("/", (req, res) => { res.send(`HELLO
`); }) appAuthBasic.listen(8081)