【发布时间】:2017-08-03 06:52:30
【问题描述】:
我有以下用户授权路径代码:
var User = require('models/user').User;
var HttpError = require('error').HttpError;
var AuthError = require('models/user').AuthError;
var async = require('async');
exports.get = function(req, res) {
res.render('lobby', {title: 'Lobby'});
};
exports.post = function(req, res, next) {
var username = req.body.username;
var password = req.body.password;
User.authorize(username, password, function (err, user) {
if (err) {
if (err instanceof AuthError) {
return next(new HttpError(403, err.message));
} else {
return next(err);
};
};
req.session.user = user._id;
res.send({});
});
};
这是我的用户模型代码:
var crypto = require('crypto');
var async = require('async');
var util = require('util');
var mongoose = require('lib/mongoose'),
Schema = mongoose.Schema;
var schema = new Schema({
username: {
type: String,
unique: true,
required: true
},
hashedPassword: {
type: String,
required: true
},
salt: {
type: String,
required: true
},
created: {
type: Date,
default: Date.now
}
});
schema.methods.encryptPassword = function(password) {
return crypto.createHmac('sha1', this.salt).update(password).digest('hex');
};
schema.virtual('password')
.set(function(password) {
this._plainPassword = password;
this.salt = Math.random() + '';
this.hashedPassword = this.encryptPassword(password);
})
.get(function() { return this._plainPassword; });
schema.methods.checkPassword = function(password) {
return this.encryptPassword(password) === this.hashedPassword;
};
schema.statics.authorize = function(username, password, callback) {
async.waterfall([
function(callback) {
User.findOne({username: username}, callback);
},
function(user, callback) {
if (user) {
if (user.checkPassword(password)) {
callback(null, user);
} else {
callback(new AuthError("Wrong password"));
}
} else {
callback(new AuthError("Username does not exist"));
}
}
], callback);
};
var User = exports.User = mongoose.model('User', schema);
function AuthError(message) {
Error.apply(this, arguments);
Error.captureStackTrace(this, AuthError);
this.message = message;
}
util.inherits(AuthError, Error);
AuthError.prototype.name = 'AuthError';
exports.AuthError = AuthError;
如果用户名应该是唯一的,如果不是,用户会收到“不是唯一的用户名”消息,如何创建用户注册路径。我是编程新手。
【问题讨论】:
标签: javascript node.js validation mongoose