made bcrypt password check into a promise

auth/authentication.js

@@ -56,20 +56,18 @@ module.exports = {
             logger.debug('no user found');
             throw new Error('Authentication failed, you do not have access to that channel');
           }
-          return user.comparePassword(userPassword, (passwordErr, isMatch) => {
+          return user.comparePassword(userPassword);
-            if (passwordErr) {
+        })
-              logger.error('comparePassword error:', passwordErr);
+        .then(isMatch => {
-              throw new Error('Authentication failed, you do not have access to that channel');
+          if (!isMatch) {
-            }
+            logger.debug('incorrect password');
-            if (!isMatch) {
+            throw new Error('Authentication failed, you do not have access to that channel');
-              logger.debug('incorrect password');
+          }
-              throw new Error('Authentication failed, you do not have access to that channel');
+          logger.debug('...password was a match...');
-            }
+          resolve(channelData);
-            logger.debug('...password was a match...');
-            resolve(channelData);
-          });
         })
         .catch(error => {
+          logger.warn('authenticateChannelCredentials error');
           reject(error);
         });
     });

models/user.js

@@ -24,8 +24,8 @@ module.exports = (sequelize, { STRING }) => {
     User.hasOne(db.Channel);
   };
 
-  User.prototype.comparePassword = function (password, callback) {
+  User.prototype.comparePassword = function (password) {
-    bcrypt.compare(password, this.password, callback);
+    return bcrypt.compare(password, this.password);
   };
 
   User.prototype.changePassword = function (newPassword) {

passport/local-login.js

@@ -30,33 +30,33 @@ module.exports = new PassportLocalStrategy(
     passwordField: 'password',
   },
   (username, password, done) => {
-    logger.debug('logging user in');
+    return db.User
-    return db
+      .findOne({
-      .User
+        where: {userName: username},
-      .findOne({where: {userName: username}})
+      })
       .then(user => {
         if (!user) {
-          // logger.debug('no user found');
+          logger.debug('no user found');
           return done(null, false, {message: 'Incorrect username or password'});
         }
-        user.comparePassword(password, (passwordErr, isMatch) => {
+        return user.comparePassword(password)
-          if (passwordErr) {
+          .then(isMatch => {
-            logger.error('passwordErr:', passwordErr);
+            if (!isMatch) {
-            return done(null, false, {message: passwordErr});
+              logger.debug('incorrect password');
-          }
+              return done(null, false, {message: 'Incorrect username or password'});
-          if (!isMatch) {
+            }
-            // logger.debug('incorrect password');
+            logger.debug('Password was a match, returning User');
-            return done(null, false, {message: 'Incorrect username or password'});
+            return returnUserAndChannelInfo(user)
-          }
+              .then(userInfo => {
-          logger.debug('Password was a match, returning User');
+                return done(null, userInfo);
-          return returnUserAndChannelInfo(user)
+              })
-            .then((userInfo) => {
+              .catch(error => {
-              return done(null, userInfo);
+                return error;
-            })
+              });
-            .catch(error => {
+          })
-              return done(error);
+          .catch(error => {
-            });
+            return error;
-        });
+          });
       })
       .catch(error => {
         return done(error);

routes/api-routes.js

@@ -178,6 +178,7 @@ module.exports = (app) => {
         }
       })
       .catch(error => {
+        console.log('handling error response...');
         errorHandlers.handleErrorResponse(originalUrl, ip, error, res);
       });
   });

task-scripts/update-password.js

@@ -26,18 +26,17 @@ db.sequelize.sync() // sync sequelize
     if (!user) {
       throw new Error('no user found');
     }
-    return new Promise((resolve, reject) => {
+    return Promise.all([
-      user.comparePassword(oldPassword, (passwordErr, isMatch) => {
+      user.comparePassword(oldPassword),
-        if (passwordErr) {
+      user,
-          return reject(passwordErr);
+    ]);
-        }
+  })
-        if (!isMatch) {
+  .then(([isMatch, user]) => {
-          return reject('Incorrect old password.');
+    if (!isMatch) {
-        }
+      throw new Error('Incorrect old password.');
-        logger.debug('Password was a match, updating password');
+    }
-        return resolve(user.changePassword(newPassword));
+    logger.debug('Password was a match, updating password');
-      });
+    return user.changePassword(newPassword);
-    });
   })
   .then(() => {
     logger.debug('Password successfully updated');