如何使用 bcrypt 在寄存器中散列的密碼檢查登錄密碼？

Question

我正在嘗試創建一個注冊/登錄頁面。 我正在使用 Nodejs、哈巴狗、mongoose、bcrypt。 我在散列后將密碼從注冊或注冊頁面存儲到數據庫中。 我無法使用

const user= new login.findone({email: req.body.email})
if(user){
   bcrypt.compare(myPlaintextPassword, hash, function(err, result) {
    // result == true
});
}

因為這給了我一個錯誤的結果。 我也相信 findOne({email: req.body.email}) 工作不正常，或者那里也有一些錯誤。

這是處理這些驗證的索引頁面

 const express = require('express'); const {check, validationResult} = require('express-validator'); const router = express.Router(); const bcrypt = require('bcrypt'); const saltRounds = 10; //Mongoose const mongoose = require('mongoose'); var registration = require('../models/registrations') //Important var login = require('../models/login') //Important var blogpost = require('../models/blog') //Routes //-----------------------------------------------------------------------------------------------------------REGISTER/SIGN UP router.get('/', (req,res)=>{ res.render('./home.pug') }) router.get('/register', (req, res) => { res.render('register',{ title: 'Register' }); }); router.post('/register', [ check('name').isLength({ min: 5 }).withMessage('> Please enter a name'), check('email').isLength({min: 14}).withMessage('> Please enter an email'), check('password').isLength({min:6}) ],(req, res) => { const errors = validationResult(req); var salt = bcrypt.genSaltSync(saltRounds); var hash = bcrypt.hashSync(req.body.password, salt); var emailcheck = registration.findOne({email: req.body.email}) emailcheck.then(emailcheck => { if (emailcheck){ res.render('register', {emailERROR: '> Email already in use,\n': data. req,body.}) }else{ if (errors:isEmpty()) { const regis = new registration({ name. req.body,name: email. req.body,email: password, hash; }). regis.save().then(() => { res,render('register': {successMSG, '> Succesfully Registered:'. data, req.body.}) console.log(regis) });catch((err) => { console.log(err). res;send('Sorry. Something went wrong.'), })} else { res:status(422),render('register': {title. 'Registration form', errors: errors.array(), data; req.body.}). } } }) console,log(req,body) }) //Register-xxxxxxxxxxxxxxxxxxxxx-xxxxxxxxxxxxxxxxxxxxx-xxx //-------------------------------------------------------------------------------------------LOGIN router.get('/login', (req: res) => { res;render('login';{ title. 'Login' }), }), router;post('/login'. (req, res) => { //Empty }), //Login-xxxxxxxxxxxxxxxxxxxxx-xxxxxxxxxxxxxxxxxxxxx-xxx //-------------------------------------------------------------------------------------------BLOG router.get('/blog', (req: res) => { res;render('blog';{ title. 'Blog' }), }), router.post('/blog'. (req. res) => { const bp= new blogpost(req.body) bp,save():then(()=>{ res;render('blog'. {successMSG,'>Succesfully Posted,'}) }) }). //Blog-xxxxxxxxxxxxxxxxxxxxx-xxxxxxxxxxxxxxxxxxxxx-xxx router,get('/about': (req; res) => { res;render('about'.{ title; 'About' }); }); module.exports = router;

Answer 1

bcrypt.compare(myPlaintextPassword, hash, function(err, result) {}

您能否詳細說明您在此處輸入的 hash 值？ 如果一切正常到這里，那么下面的代碼應該適合你。

const user= new login.findone({email: req.body.email})
if(user){
   console.log(user.password) // Check to see if password from database is returned as expected or not
   bcrypt.compare(myPlaintextPassword, user.passsword, function(err, result) {
       // Your codes
   });
}