Mittwoch, 18. Mai, 2016

MongoDB CRUD the MVC way with Passport Authentication 66
17
18 if (!user.authenticate(password)) {
19 return done(null, false, {message: 'Invalid password'});
20 }
21
22 return done(null, user);
23 }
24 );
25 }));
26 };
Here you first require the Passport module, then the local strategy module’s Strategy object, and
finally your User Mongoose model. Then, you register the strategy using the passport.use() method
that uses an instance of the LocalStrategy object. Inside the callback function you use the User
Mongoose model to find a user with the passed username and try to authenticate it.
Now, create a passport.js file in the config folder and add this code:
1 var passport = require('passport'),
2 mongoose = require('mongoose');
3
4 module.exports = function() {
5 var User = mongoose.model('User');
6
7 passport.serializeUser(function(user, done) {
8 done(null, user.id);
9 });
10
11 passport.deserializeUser(function(id, done) {
12 User.findOne(
13 {_id: id},
14 '-password',
15 function(err, user) {
16 done(err, user);
17 }
18 );
19 });
20
21 require('./strategies/local.js')();
22 };
With passport.serializeUser() and passport.deserializeUser() methods you defined how Passport
will handle user serialization. When a user is authenticated, Passport will save its _id property to