Encore/passport_config.js at 4f84f9b7af899f8a96209f06e3de39b4e22fd5e4 · OSDLabs/Encore · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
// Configuration file for passportJS

var LocalStrategy = require('passport-local').Strategy;
var validate = require('validator');

module.exports = function(app, passport){

  // Specify a local strategy for passport normal user login
  passport.use('user-login', new LocalStrategy(
    function(username, password, cb){

      // Validate user data
      var error = 0;
      username = validate.trim(username);
      username = username.toLowerCase();
      error += validate.isEmpty(username);
      error += validate.isEmpty(password);

      if (!error) {
        app.db.users.findOne({username: username}, function(err, user) {
          if (err) { return cb(err); }
          if (!user) { return cb(null, false, {message:"Invalid credentials"}); }
          if (user.password != password) { return cb(null, false, {message:"Invalid credentials"}); }
          return cb(null, user);
        });

      }
      else
        return cb(null, false);
    }
  ));

  // Specify a local strategy for passport normal user signup
  passport.use('user-signup', new LocalStrategy(
    function(username, password, cb){

      // Validate user data
      var error = 0;
      username = validate.trim(username);
      username = username.toLowerCase();
      error += validate.isEmpty(username);
      error += validate.isEmpty(password);

      if (!error) {
        app.db.users.findOne({username: username}, function(err, user) {
          if (err) {
            return cb(err);
          }
          if (user) {
            return cb(null, false, {message:"User already registered"});
          }
          else{
            // Must not be the same as admins
            app.db.admins.findOne({username: username}, function(err, user) {
              if (err) {
                return cb(err);
              }
              if (user) {
                return cb(null, false, {message:"User already registered"});
              }
              else{
                app.db.users.insert({username: username, password:password});
              }
            });
          }
        });
      }else
        return cb(null, false);
    }
  ));

  // Specify a local strategy for passport admin login
  passport.use('admin-login', new LocalStrategy(
    function(username, password, cb){

      // Validate user data
      var error = 0;
      username = validate.trim(username);
      username = username.toLowerCase();
      error += validate.isEmpty(username);
      error += validate.isEmpty(password);

      if (!error) {
        app.db.admins.findOne({username: username}, function(err, user) {
          if (err) { return cb(err); }
          if (!user) { return cb(null, false, {message:"Invalid credentials"}); }
          if (user.password != password) { return cb(null, false, {message:"Invalid credentials"}); }
          return cb(null, user);
        });

      }
      else
        return cb(null, false);
    }
  ));

  // Specify serialize and deserialize methods for passport
  passport.serializeUser(function(user, cb){
    var sessionUser = user;
    cb(null, sessionUser);
  });
  passport.deserializeUser(function(user, cb){
      cb(null, user);
  });
};