Nemcio/meanTorrent
1
0
Fork 0
mirror of https://github.com/taobataoma/meanTorrent.git synced 2026-03-10 22:20:29 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #575 from pgrodrigues/0.4.0

Browse Source 
Abstract the local strategy login error to thwart hackers
This commit is contained in:
Ilan Biala
2015-06-03 19:39:19 -04:00
parent 716925b29f e11ffda6e5
commit cd5db4ad4d
1 changed files with 2 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
modules/users/server/config/strategies/local.js
View File

@@ -20,14 +20,9 @@ module.exports = function() {
if (err) {
return done(err);
}
if (!user) {
if (!user || !user.authenticate(password)) {
return done(null, false, {
message: 'Unknown user'
});
}
if (!user.authenticate(password)) {
return done(null, false, {
message: 'Invalid password'
message: 'Invalid username or password'
});
}