Public API for a society manager application

login.js 2.1KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364
  1. var Redis = require("ioredis");
  2. var redis = new Redis();
  3. var bcrypt = require('bcrypt-nodejs');
  4. module.exports = {
  5. perform: function(a,b) {
  6. perform(a,b);
  7. }
  8. }
  9. var perform = function(req, res) {
  10. var username = req.body.user || req.query.user;
  11. username = username.toLowerCase();
  12. var password = req.body.password || req.query.password;
  13. var auth_key = req.body.auth_key || req.query.auth_key;
  14. var uquery = 'user:' + username;
  15. redis.hgetall(uquery).then(function (result) {
  16. if (result.password && result !== undefined && result !== null) {
  17. var user_object = result;
  18. if (auth_key !== "" && auth_key !== undefined && auth_key !== null) {
  19. if (auth_key === user_object["auth-key"]) {
  20. var timestamp_user = Date.now().toString() + username;
  21. user_object["auth-key"] = bcrypt.hashSync(timestamp_user);
  22. redis.set(uquery, "auth-key", user_object["auth-key"]);
  23. res.send({"logged_in": 1,
  24. "auth-key": user_object["auth-key"],
  25. "error": 0});
  26. } else {
  27. res.send({"logged_in": 0,
  28. "error": 3});
  29. }
  30. } else {
  31. bcrypt.compare(password, user_object["password"], function (err, matched) {
  32. if (matched === true) {
  33. if (undefined === user_object["auth-key"]) {
  34. var timestamp_user = Date.now().toString() + username;
  35. user_object["auth-key"] = bcrypt.hashSync(timestamp_user);
  36. redis.set(uquery, JSON.stringify(user_object));
  37. res.send({"logged_in": 1,
  38. "auth-key": user_object["auth-key"],
  39. "error": 0});
  40. } else {
  41. res.send({"logged_in": 1,
  42. "auth-key": user_object["auth-key"],
  43. "error": 0});
  44. }
  45. return;
  46. } else {
  47. res.send({"logged_in": 0,
  48. "error": 2});
  49. return;
  50. }
  51. });
  52. }
  53. } else {
  54. res.send({"logged_in": 0,
  55. "error": 1});
  56. return;
  57. }
  58. });
  59. };