sudoxreboot/habitica
1
0
Fork 0
mirror of https://github.com/sudoxnym/habitica.git synced 2026-07-15 00:12:17 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

perf(auth): exclude unecessary auth fields

Browse source
This commit is contained in:
Tyler Renelle 2014-09-02 15:54:56 -06:00
parent 12a93c8fe3
commit 6229b2c79e
1 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
src/controllers/auth.js
View file

@ -134,9 +134,9 @@ api.loginLocal = function(req, res, next) {
if (!user) return res.json(401, {err:"Username or password incorrect. Click 'Forgot Password' for help with either. (Note: usernames are case-sensitive)"});
if (user.auth.blocked) return res.json(401, accountSuspended(user._id));
// We needed the whole user object first so we can get his salt to encrypt password comparison
User.findOne({$and:[login,
{'auth.local.hashed_password': utils.encryptPassword(password, user.auth.local.salt)}
]}
User.findOne(
{$and: [login, {'auth.local.hashed_password': utils.encryptPassword(password, user.auth.local.salt)}]}
, {_id:1, apiToken:1}
, function(err, user){
if (err) return next(err);
if (!user) return res.json(401,{err:"Username or password incorrect. Click 'Forgot Password' for help with either. (Note: usernames are case-sensitive)"});