if (auth.is_locked) {
return res.status(401).send({ message: 'Your account is locked due to suspicious activity. Please contact us to continue.' });
}
- const isValid = await user.comparePassword(password);
+ logger.warn(user);
+ logger.warn(auth.password);
+ logger.warn(password);
+ const isValid = await user.comparePassword(password, auth);
if (!isValid) {
await user.failLogin();
return res.status(401).send({ success: false, user: null, token: null });
});
}
- async comparePassword(password) {
- const auth = await db.authentication.find_by_user_id(this.id);
+ async comparePassword(password, auth) {
console.log(auth);
console.log(password);
console.log(auth.password);