From 64ed3568a5ba5b1482f3c79d98098efd158799df Mon Sep 17 00:00:00 2001
From: Adrian Obelmejias <obeladrian@gmail.com>
Date: Thu, 11 Feb 2016 17:55:41 -0500
Subject: [PATCH] Add password validation to passport strategy

---
 config/passport.js | 15 ++++++++++++---
 1 file changed, 12 insertions(+), 3 deletions(-)

diff --git a/config/passport.js b/config/passport.js
index 525c7fe..de19681 100644
--- a/config/passport.js
+++ b/config/passport.js
@@ -18,12 +18,21 @@ passport.deserializeUser(async (id, done) => {
 passport.use('local', new Strategy({
   usernameField: 'username',
   passwordField: 'password'
-}, async (email, password, done) => {
+}, async (username, password, done) => {
   try {
-    const user = await User.findOne({ email, password })
+    const user = await User.findOne({ username })
     if(!user) { return done(null, false) }
 
-    done(null, user)
+    try {
+      const isMatch = await user.validatePassword(password)
+
+      if(!isMatch) { return done(null, false) }
+
+      done(null, user)
+    } catch(err) {
+      done(err)
+    }
+
   } catch(err) {
     return done(err)
   }