-
Notifications
You must be signed in to change notification settings - Fork 0
/
passport-init.js
93 lines (78 loc) · 2.14 KB
/
passport-init.js
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
var LocalStrategy = require('passport-local').Strategy;
var bCrypt = require('bcrypt-nodejs');
var mongoose = require('mongoose');
var User = mongoose.model('User');
module.exports = function(passport) {
/*------------ Provides user id to session -------------*/
passport.serializeUser(function(user, done) {
console.log('serializing user');
done(null, user._id);
});
/*---------- Checks user exists on databese by sessions id -----------*/
passport.deserializeUser(function(id, done) {
console.log('deserializing user');
User.findById(id, function(err, user) {
if (err) {
return done(err, false)
}
done(null, user);
});
});
/*-----------------Log in strategy---------------------*/
passport.use('login', new LocalStrategy({
passReqToCallback: true
}, function(req, username, password, done) {
User.findOne({
username: username
}, function(err, user) {
if (err) {
return done(null, false);
}
if (!user) {
return done(null, false);
}
if (!isValidPassword(user, password)) {
return done(null, false);
}
return done(null, user);
});
}));
/*----------------- Sign up strategy ---------------------*/
passport.use('signup', new LocalStrategy({
passReqToCallback: true
}, function(req, username, password, done) {
console.log('username: ' + username);
User.findOne({
username: username
}, function(err, user) {
if (err) {
console.log('first error');
return done(err, false);
}
if (user) {
console.log('Username already taken');
return done('Username already taken', false)
}
var newUser = new User({
role: 'user',
username: username,
password: createHash(password)
});
newUser.save(function(err, user) {
if (err) {
console.log('2nd error');
return done(err, false);
}
console.log('Registration successful for %s', username);
return done(null, user)
});
});
}));
var createHash = function(password) {
var salt = bCrypt.genSaltSync(10);
return bCrypt.hashSync(password, salt);
}
var isValidPassword = function(user, passwordProvided) {
return bCrypt.compareSync(passwordProvided, user.password);
};
}