在node.js

Question

注册时间密码已加密并存储在数据库（mongoDB）中。 要加密此密码，我在模型中使用了 bcrypt.hash 。现在我正在使用node.js重置密码如何比较加密密码和用户输入的密码。

user.js的

var mongoose = require('mongoose');
var Schema = mongoose.Schema;
var bcrypt = require('bcrypt-nodejs');
var passportLocalMongoose = require('passport-local-mongoose');

var UserSchema = new Schema({
name: String,
email: {type: String, required: true, select: true},
mobile: {type: String, required: true, select: true},
password: {type: String, required: true, select: true},
active:{ type: 'Boolean', default: false},
generatedOtp:{ type: String},
resetPasswordToken: String,
resetPasswordExpires: Date,
//occasiontype: {type: String, required: true, select: true},
//date: {type: Date  , required: true, select: true}
});




UserSchema.pre('save', function (next) {
var user = this;

if(!user.isModified('password')) return next();


bcrypt.hash(user.password, null, null, function(err, hash){
    if(err) return next(err);

    user.password = hash;
    next();
});
});

UserSchema.methods.comparePassword = function(password){
var user = this;
//console.log(user.password + password);
return bcrypt.compareSync(password, user.password);
}
UserSchema.plugin(passportLocalMongoose);
module.exports = mongoose.model('User', UserSchema);

api.js

router.post('/resetPasswordafterlogin',function(req,res){
    var uId = ObjectId(req.body.userId);
    var oldPassword = req.body.formdata.oldPassword;
    var newPassword = req.body.formdata.newPassword;


    console.log(req.body.formdata.validPassword)
    return res.json({})
});

controller.js

(function ()
{
'use strict';

angular
    .module('app.security')
    .controller('SecurityController', SecurityController);

/** @ngInject */
//SecurityController.$inject = ['$http', '$location'];
function SecurityController($http, $location, $rootScope, $localStorage)
{
    var vm = this;
    vm.uId = $localStorage._id;

    vm.save =  function(userData){

        $http({
            url: 'http://192.168.2.8:7200/api/resetPasswordafterlogin',
            method: 'POST',
            data: {userId: vm.uId, formdata: userData}
        }).then(function(res) {
            console.log("success");
        }, function(error) {
            alert(error.data);
        });
    };   

    vm.cancel = function(){
        $location.url('/pages/dashboard');
    }

}
})();

所以现在我必须在用户模型中将这个oldPassword与加密密码进行比较。怎么做？

Answer 1

我在node.js中使用了以下内容。

api.js

router.post('/resetPasswordafterlogin',function(req,res){
    var uId = ObjectId(req.body.userId);
    var oldPassword = req.body.formdata.oldPassword;
    var newPassword = req.body.formdata.newPassword;

        async.waterfall([
        function(done) {
            User.findOne({ _id : uId}, function(err, user) {
                var validPassword = user.comparePassword(oldPassword);
                if (!validPassword) {
                    var message = {
                        message: 'Incorrect password.'
                    };
                    done(null, message);
                }else if (user, done){
                    user.password = newPassword;

                    user.save(function(err) {
                        req.logIn(user, function(err) {
                            done(err, user);
                        });
                    });


                    var message = {
                        message: 'Success! Your password has been changed.'
                    };
                    done(null, message);
                }
            });
        }
    ], function(err, result){
        if (err) return next(err);
        return res.json({
            result: result.message
        });
    });
});

Answer 2

这是比较密码的简单功能：

exports.comparePassword = (passwordToCompare, dbPassword, callback) => {
  console.log("comparePassword", passwordToCompare)
  bcrypt.compare(passwordToCompare, dbPassword, (err, isMatch) => {
    if (err) {
      return callback(err);
    }
    else
      callback(null, isMatch);
  });
};