app.use(bruteforce.prevent, function(req, res, next) { var user = basicAuth(req); if (user && user.name === auth.username && user.pass === auth.password) { // Successful authentication, reset rate limiting. req.brute.reset(next); } else { res.statusCode = 401; res.setHeader('WWW-Authenticate', 'Basic realm="terriajs-server"'); res.end('Unauthorized'); } });
router.route('/userCheck/username/:id').get(bruteforcedupe.prevent, function(req, res, next) { const { id } = req.params; db.from('users') .select('username') .where('username', id) .then(row => { if (row.length > 0) { const rowsend = row[0]; res.status(200); res.json(rowsend); } else { const rowsend = { username: '', password: '', givenname: '', surname: '', email: '', role: 'user', status: 'active', }; res.status(200); res.json(rowsend); } }) .catch(err => { logger.main.error(err); return next(err); }); });
.post(bruteforcelogin.prevent, function(req, res, next) { passport.authenticate('login-user', (err, user) => { if (err) {
router.route('/userCheck/email/:id').get(bruteforcedupe.prevent, function(req, res, next) { const { id } = req.params; db.from('users') .select('email') .where('email', id) .then(row => { if (row.length > 0) { const rowsend = row[0]; res.status(200); res.json(rowsend); } else { const rowsend = { username: '', password: '', givenname: '', surname: '', email: '', role: 'user', status: 'active', }; res.status(200); res.json(rowsend); } }) .catch(err => { logger.main.error(err); return next(err); }); });