TravelMate/authorizer.js at master · PollenCode/TravelMate · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
const LocalStrategy = require("passport-local").Strategy;
const salter = require("./salter");
const util = require("util");
const moment = require("moment");

var mysql = require("mysql");
var connection = mysql.createConnection({
  host: "localhost",
  user: "root",
  password: "8vyD3SR=_uGa5!s*jcXTbFzaV",
  database: "travelmate"
});

function createUserFromRow(sqlResults)
{
    var userObject = {};
    for(var v in sqlResults[0])
        userObject[v] = sqlResults[0][v];
    return userObject;
}

module.exports.setupPassport = function(passport) {

    passport.serializeUser((user, next) => {
        next(null, user.id);
    });
    passport.deserializeUser((id, next) => {
        if (connection.query("SELECT * FROM users WHERE id = ?", [id], (error, results, fields) => {
            return next(null, createUserFromRow(results));
        }));
    });

    const localLogin = new LocalStrategy({
        usernameField: "email",
        passwordField: "password",
        passReqToCallback: true
    }, (req, email, password, next) => {

        if (connection.query("SELECT * FROM users WHERE email = ?", [email], (error, results, fields) => {

            if (error)
                return next(error, null);
            if (results.length != 1)
                return next(new Error("User not found."));
            if (!salter.checkPassword(password, results[0].passwordHash, results[0].passwordSalt))
                return next(new Error("Incorrect password."));

            return next(null, createUserFromRow(results));
        }));
    });

    /*const localFastLogin = new LocalStrategy({
        usernameField: "email",
        passwordField: "pinHash",
        passReqToCallback: true
    }, (req, email, pinHash, next) => {
        TODO log in with passcode
    });*/

    const localRegister = new LocalStrategy({
        usernameField: "email",
        passwordField: "password",
        passReqToCallback: true
    }, (req, email, password, next) => {

        if (connection.query("SELECT * FROM users WHERE email = ?", [email], (error, results, fields) => {

            if (error)
                return next(error);
            if (results.length != 0)
                return next(new Error("A user with this email already exists."));

            const hashedPassword = salter.hashPasswordWithRandomSalt(password);
            var currentDateTime = moment().format("DD-MM-YYYY hh:mm:ss");
            var dateOfBirth = moment(req.body.dateOfBirth, "YYYY-MM-DD").format("DD-MM-YYYY");
            var userRecord = [req.body.email, hashedPassword.hashed, hashedPassword.withSalt, req.body.firstName, req.body.lastName, dateOfBirth, currentDateTime];

            if (connection.query("INSERT INTO users(email,passwordHash,passwordSalt,firstName,lastName,dateOfBirth,dateOfRegister) VALUES(?,?,?,?,?,?,?)", userRecord, (error, results, fields) => {

                if (error)
                    return next(error);

                if (connection.query("SELECT * FROM users WHERE id = ?", [results.insertId], (error, results, fields) => {

                    if (error)
                        return next(error);
                    if (results.length != 1)
                        return new Error("Could not gather user information.");

                    return next(null, createUserFromRow(results));
                }));
            }));
        }));
    });

    passport.use("localLogin", localLogin);
    passport.use("localRegister", localRegister);
};