asyncified setting and verifying the password

Signed-off-by: Claudius <opensource@amenthes.de>
2019-05-13 11:51:05 +02:00
parent df666dd214
commit 1d403e183d
5 changed files with 48 additions and 18 deletions
--- a/lib/web/auth/email/index.js
+++ b/lib/web/auth/email/index.js
@@ -23,8 +23,14 @@ passport.use(new LocalStrategy({
    }
  }).then(function (user) {
    if (!user) return done(null, false)
-    if (!user.verifyPassword(password)) return done(null, false)
-    return done(null, user)
+    user.verifyPassword(password).then(verified => {
+      if (verified) {
+        return done(null, user)
+      } else {
+        logger.warn('invalid password given for %s', user.email)
+        return done(null, false)
+      }
+    })
  }).catch(function (err) {
    logger.error(err)
    return done(err)