NodeBB/src/user/password.js

'use strict';

var nconf = require('nconf');

var db = require('../database');
var Password = require('../password');

module.exports = function(User) {

	User.hashPassword = function(password, callback) {
		if (!password) {
			return callback(null, password);
		}

		Password.hash(nconf.get('bcrypt_rounds') || 12, password, callback);
	};

	User.isPasswordCorrect = function(uid, password, callback) {
		db.getObjectField('user:' + uid, 'password', function(err, hashedPassword) {
			if (err || !hashedPassword) {
				return callback(err);
			}

			Password.compare(password || '', hashedPassword, callback);
		});
	};

	User.hasPassword = function(uid, callback) {
		db.getObjectField('user:' + uid, 'password', function(err, hashedPassword) {
			callback(err, !!hashedPassword);
		});
	};

};