Bcrypt.compare 不比较密码

Question

I have a bcrypt.compare function, but it couldn't compare the passwords rather any password entered was able to return status ok. See the code below and help me out.Thanks

bcrypt.compare(req.body.password, users.password).then(
    (valid) => { 
        if (!valid) {
            return res.status(401).json({
                error: new Error('Incorrect password!')
            });
        }
        const token = jwt.sign(
            { userId: users._id },
            'RANDOM_TOKEN_SECRET',
            { expiresIn: '24h' }
        );
        res.status(200).json({
            userId: users._id,
            token: 'token'
        });
    }
).catch(
    (error) => {
        res.status(500).json({
            error: error
        });
    }
);

Answer 1

I once had some like this before. How long is your password column or table? Bcrypt hashes the password with an string greater than 60 chars. Is it your column on that range?