與護照bcrypt誤差和貓鼬

Question

Bcrypt被拋出Incorrect arguments錯誤，我在user.js

userSchema.methods.comparePassword = (candidatePassword, callback) => { 
    bcrypt.compare(candidatePassword, this, (err, isMatch) => { 
    console.log('candidatePassword= ', candidatePassword, '& this= ', this); 
    if (err) { return callback(err); } 
    callback(null, isMatch); 
    }); 
}; 

    /* 
    candidatePassword= bird 
    this= {} 
    this.password= undefined */ 

追溯到該函數的用戶對象是回來作爲一個空對象，因此this.password是未定義的。我假設bcrypt.compare中的this參數指向userSchema實例。該userSchema在passport.js

const passport = require('passport'); 
const ExtractJwt = require('passport-jwt').ExtractJwt; 
const JwtStrategy = require('passport-jwt').Strategy; 
const LocalStrategy = require('passport-local').Strategy; 

const User = require('../models/user'); 
const config = require('../config'); 

var localOptions = { 
    usernameField: 'email', 
}; 

// Verifies user by checking if a password matches the specified email during signin 
var localStrategy = new LocalStrategy(localOptions, function (email, password, done) { 
    User.findOne({ email:email.toLowerCase()}, function (err, user) { 
    console.log('/passport.js/localStrategy- user object: ', user) 
    if (err) { return done(err); } 
    if (!user) { return done(null, false); } 
    user.comparePassword(password, function (err, isMatch) { 
     console.log('/passport.js/localStrategy- password: ', password) 
     if (err) { return done(err); } 
     if (!isMatch) { return done(err, false); } 
     return done(null, user); 
    }); 
    }); 
}); 

// ... jwt strategy ... 

passport.use(localStrategy); 

/* 
    user object: { _id: 58a1018dc3f89eb5955b8638, 
    email: 'bird@bird.com', 
    password: '$2a$10$lAJ9hoGKt9ggfk1TISfkOedxDIs/waLB5e4PccHAKt286XCKCY0/q', 
    __v: 0 } */ 

宣佈我不知道什麼相當的問題，因爲它似乎是一個用戶對象返回從MongoDB的加密密碼字段，並user.comparepassword()叫...

我使用相同的Schema對象也爲用戶簽名。

任何幫助/提示表示讚賞！

Answer 1

您只設置模型，以便它拉入candidatePassword但從未從數據庫中找到存儲的密碼。由於這是返回一個空對象，電子郵件不匹配或密碼沒有被比較存儲。嘗試簡化comparePassword函數，並將「同步」添加到bcrypt.compare，從而不需要回調。

在車型：

userSchema.methods.comparePassword = (candidatePassword) => { 
    return bcrypt.compareSync(candidatePassword, this.password); 
};