Bcrypt.compare（）仅返回false，在承诺下使用

Question

I am using Bcrypt for hashing passwords and storing it in the database,

Bcrypt is returning false, when I retrieve the hashed password from the database, and compare with the typed user password.

I am using it under Promise, but bcrypt is returning false on the correct password

Here is the code:

userSchema.statics.findByCredentials = function(email, password) {
const User = this;

return User.findOne({email}).then((user) => {
    if(!user) {
        return Promise.reject();
    }
    // console.log(user.password);

    return new Promise((resolve, reject) => {
        bcrypt.compare(password, user.password, (err,res) => {
             if(res) {
                 resolve(user);
             }
             else {
                 reject("Problem here");
             }
            console.log(res);

        });            
    });
});

};

I am trying promise chain to the main file ie server.js and return the details to the user, but it's not working.

Here is the route code of express:

app.post('/users/login', (req, res) => {
const body = _.pick(req.body, ['email', 'password']);
// res.send(body);

User.findByCredentials(body.email, body.password)
    .then((user) => {
        res.send(user);
    }).catch((e) => res.send(e));

});

Thanks

Answer 1

Have you tried using the promise api for bcrypt ?

It might look like this:

userSchema.statics.findByCredentials = function(email, password) {
  const User = this;

  return User.findOne({email}).then((user) => {
      if(!user) {
          return Promise.reject();
      }
      // console.log(user.password);

      return bcrypt.compare(password, user.password)
        .then(res => {
          if (res) {
            return user;
          }
          throw new Error('Problem here');
        });
  });
}

If not, you might be getting an error, so you could check the err argument to see if something came back from there. Other than that, as long as user.password is the hashed version of the original password, then it should be working.