如何比較 bcrypt hash 密碼

Question

我是節點 js 的新手，我正在嘗試驗證加密的密碼，並且我已經給出了我嘗試過的以下代碼。

async function passCheck(event) {
  // in event i am passing user entered password and email
  var EnteredPassword = bcrypt.hashSync(event.password, 10); //10 saltrounds

  var fromDB = await pool.query('SELECT password from User WHERE email  = ?', event.emailID);
  if (EnteredPassword == fromDB) {
    //Here i am comparing
    console.log('valid');
  } else {
    console.log('invalid');
  }
}

Answer 1

bcrypt有一個用於比較哈希的內置方法。

async function passCheck(event) {
  var fromDB = await pool.query('SELECT password from User WHERE email  = ? Limit 1', event.emailID);
  // --------------------------------------------------------------------------^
  // Added limit 1 to make sure the only one record will be returned.
  if (fromDB.length > 0 && await bcrypt.compare(event.password, fromDB[0].password)) {
    //Here i am comparing
    console.log('valid');
  } else {
    console.log('invalid');
  }
}

DB 結果集通常返回一個對象數組，因此，您應該檢查是否有一些結果（ fromDB.length > 0 ），然后將哈希字符串本身傳遞給 compare 方法。

Answer 2

嘗試這個

  const auth = await bcrypt.compare(EnteredPassword , fromDB)
if(auth ){    
   console.log("valid");
}
else{
   console.log("invalid")

}