Advertisement
Guest User

Untitled

a guest
Feb 24th, 2016
76
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.59 KB | None | 0 0
  1. /**
  2. * Signup
  3. */
  4. exports.signup = function(req, res) {
  5. console.log(req.body);
  6. // For security measurement we remove the roles from the req.body object
  7. delete req.body.roles;
  8.  
  9. // Init Variables
  10. var user = new User(req.body);
  11. var message = null;
  12.  
  13. // Add missing user fields
  14. user.provider = 'local';
  15. user.displayName = user.firstName + ' ' + user.lastName;
  16. user.token = crypto.randomBytes(64).toString('hex');
  17. // Then save the user
  18. user.save(function(err) {
  19. if (err) {
  20. return res.status(400).send({
  21. message: errorHandler.getErrorMessage(err)
  22. });
  23. } else {
  24. // Remove sensitive data before login
  25. user.password = undefined;
  26. user.salt = undefined;
  27.  
  28. req.login(user, function(err) {
  29. if (err) {
  30. res.status(400).send(err);
  31. } else {
  32. res.json(user);
  33. }
  34. });
  35. }
  36. });
  37. };
  38.  
  39.  
  40. /**
  41. * token auth :: username/token verification
  42. */
  43. exports.checkAuth = function(req, res) {
  44. User.findOne({username:req.body.username,token:req.body.token},function(err,user){
  45. if(user){
  46. return res.jsonp({message: 'ok'});
  47. }else if(!user && !err) {
  48. return res.status(400).send({
  49. message: 'Error Authentication'
  50. });
  51. }else{
  52. res.status(400).send(err);
  53. }
  54. });
  55.  
  56. };
  57.  
  58. exports.checkAuthMiddleWare = function(req, res,next) {
  59. console.log(req.body);
  60. User.findOne({username:req.body.username,token:req.body.token},function(err,user){
  61. if(user){
  62. next();
  63. }else if(!user && !err) {
  64. return res.status(400).send({
  65. message: 'Error Authentication'
  66. });
  67. }else{
  68. res.status(400).send(err);
  69. }
  70. });
  71.  
  72. };
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement