Question

在我当前应用程序的先前版本中，我有一个使用bcrypt的后端应用程序，该应用程序对我的密码进行加盐和哈希处理。在此版本中，我现在使用的是具有相同路由，控制器的一对一副本。一切都很好，发布请求中的数据可以很好地保存，但没有哈希密码。现在显示空白密码。

我在Windows 10（64位）上工作，我的两个版本均为bcrypt，都是在本地安装的3.0.4。我使用mongoDB和mongoose。

我将最通用的代码版本用于hashing and salting。如前所述，这在我的旧版本中仍然有效。

有人知道发生了什么变化吗？

代码在这里：

//relevant parts of app.js
const express = require('express');
const path = require('path');
//const favicon = require('serve-favicon');
const logger = require('morgan');
const cookieParser = require('cookie-parser');
const bodyParser = require('body-parser');
const helmet = require('helmet');
const cors = require('cors');

// connection to mongoose 
require('./app_api/models/db');

//route to routes
const users = require('./app_api/routes/users');

//routes (post request)
router
	.route('/user/signup')
	.post(AuthenticationControllerPolicy.signupPost, ctrlUsers.signupPost); 

//fragment of the post controller
const signupPost = function (req, res) {
	//Make sure this account already exists
	Base.
		findOne({
			userName: req.body.userName
		}, function (user, err) {
			//Make sure user doesn 't already exist
			if (err) {
				return res.status(400).send({ msg: 'The email address you have entered is already associated with another account.' });
			} else { //etc..


//Create and save the user
user = new Base({
password: req.body.password
});
user.save(function (err) {

// base model with hashing and salting code
const baseSchema = new mongoose.Schema({
	password: { type: String, required: true }
	}, options);

const Base = mongoose.model('Base', baseSchema);

// salting and hashing
						

// hashing and salting before saving
baseSchema.pre('save', function (next) {

	let base = this;
	// only hash the password if it has been modified (or is new)
	if (!base.isModified('password')) return next();

	//generate a salt
	bcrypt.genSalt(SALT_WORK_FACTOR, function (err, salt) {
	if (err) return next(err);

	// hash the password using our new salt
	bcrypt.hash(base.password, salt, function (err, hash) {
	if (err) return next(err);

	// override the cleartext password with the hashed one
	base.password = hash;
	next();
		});
	});
	});

Answer 1

尝试类似这样的方法。确保 const Base = mongoose.model（'Base'，baseSchema）; 在代码的末尾，因为它负责创建模型，并且您已在< strong> pre 钩子将不会被创建，并且密码不会被散列。

    // On Save Hook, encrypt password
    // Before saving a model, run this function
    baseSchema.pre('save', function (next) {
      //get access to the user model
      const base= this;

      // generate a salt then run callback
      bcrypt.genSalt(SALT_WORK_FACTOR, function (err, salt) {
        if (err) { return next(err); }

        // hash (encrypt) our password using the sale
        bcrypt.hash(base.password, salt, null, function (err, hash) {
          if (err) { return next(err); }

          //overwrite plain text password with encrypted password
          base.password = hash;
          next();
        });
      });
    });

const Base = mongoose.model('Base', baseSchema);

Bcrypt不再哈希和加盐密码

1 个答案: