Problème avec le mot de passe réinitialisé avec passeport-local-mongoose

Question

J'essaie d'ajouter une fonctionnalité de mot de passe oublié à mon site. Je veux le flux typique: Je veux que les utilisateurs soumettent leur adresse e-mail, reçoivent un email avec un lien de réinitialisation, entrent un nouveau mot de passe qui remplace leur mot de passe actuel et les enregistre. Je l'ai presque fonctionné mais j'obtiens cette erreur quand j'essaye pour connecter l'utilisateur après avoir changé son mot de passe.

Qu'est-ce qui me manque?

C'est l'erreur que je reçois:

error null 
user false 
info { AuthenticationError 
    at /Users/Tom/Heroku/airbnb-toolkit/node_modules/passport-local-mongoose/lib/authenticate.js:50:36 
    at /Users/Tom/Heroku/airbnb-toolkit/node_modules/mongoose/lib/model.js:3431:16 
    at /Users/Tom/Heroku/airbnb-toolkit/node_modules/mongoose/lib/services/model/applyHooks.js:144:20 
    at _combinedTickCallback (internal/process/next_tick.js:73:7) 
    at process._tickCallback (internal/process/next_tick.js:104:9) 
    name: 'IncorrectPasswordError', 
    message: 'signin.errors.incorrect-password' } 

Ceci est mon code Node.js:

app.post('/forgot', async function(req, res, next) { 
    try { 
     var buf = await crypto.randomBytes(20); 
     var token = buf.toString('hex'); 
     var username = req.body.username; 
     var user = await User.findOneAndUpdate(
      {username}, 
      { 
       resetPasswordToken: token, 
       resetPasswordExpires: moment().add(1, 'hour').toDate() 
      } 
     ); 
     if (!user) { 
      handleError(res, 'No account with that email address exists.', 'No account with that email address exists.', 421); 
     } 
     sendEmail(username, "Superhost Tools Password Reset", "You are receiving this because you have requested the reset of the password for your account. Please click on the following link, or paste this into your browser to complete the process: http://example.com/#!/reset/" + token + " If you did not request this, please ignore this email and your password will remain unchanged."); 
     res.status(200).json("success"); 
    } catch(error) { 
     console.error(error); 
     handleError(res, error.message, "/forgot"); 
    } 
}); 

app.post('/reset', async function(req, res, next) { 
    try { 
     var resetPasswordToken = req.body.resetPasswordToken; 
     var username = req.body.username; 
     var password = req.body.password; 
     var user = await User.findOneAndUpdate({ 
      username, 
      resetPasswordToken, 
      resetPasswordExpires: {$gt: Date.now()}, 
     }, { 
      // resetPasswordToken: undefined, 
      // resetPasswordExpires: undefined, 
      password 
     }); 
     passport.authenticate('local', function(error, user, info) { 
      console.log("error", error); 
      console.log("user", user); 
      console.log("info", info); 
      if (error) { 
       return next(error); 
      } 
      if (!user) { 
       return handleError(res, "There was a problem resetting your password. Please try again.", {error_code: 401, error_message: "There was a problem resetting your password. Please try again."}, 401); 
      } 
      req.logIn(user, function(error) { 
       if (error) { 
        return next(error); 
       } 
       return res.redirect('/admin/#/'); 
      }); 
     })(req, res, next); 
    } catch(error) { 
     console.error(error); 
     handleError(res, error.message, "/reset"); 
    } 
}); 

Je suis en cours d'exécution:

"mongoose": "^4.8.4", 
"express": "~3.3.4", 
"passport": "^0.3.2", 
"passport-local": "^1.0.0", 
"passport-local-mongoose": "^4.1.0", 

"node": "7.9.0" 

Answer 1

Pour d'autres qui rencontrer ce problème. J'ai fini par trouver la solution par moi-même. J'avais besoin d'utiliser setPassword():

app.post('/reset', async function(req, res, next) { 
    try { 
     var resetPasswordToken = req.body.resetPasswordToken; 
     var username = req.body.username; 
     var password = req.body.password; 
     var user = await User.findOneAndUpdate({ 
      username, 
      resetPasswordToken, 
      resetPasswordExpires: {$gt: Date.now()}, 
     }, { 
      resetPasswordToken: undefined, 
      resetPasswordExpires: undefined, 
     }); 
     user.setPassword(password, (error, user) => { 
      if (error) { 
       return next(error); 
      } 
      user.save((err, user) => { 
       if (error) { 
        return next(error); 
       } 
       passport.authenticate('local', function(error, user, info) { 
        console.log("error", error); 
        console.log("user", user); 
        console.log("info", info); 
        if (error) { 
         return next(error); 
        } 
        if (!user) { 
         return handleError(res, "There was a problem resetting your password. Please try again.", {error_code: 401, error_message: "There was a problem resetting your password. Please try again."}, 401); 
        } 
        req.logIn(user, function(error) { 
         if (error) { 
          return next(error); 
         } 
         return res.redirect('/admin/#/'); 
        }); 
       })(req, res, next); 
      }); 
     }); 
    } catch(error) { 
     console.error(error); 
     handleError(res, error.message, "/reset"); 
    } 
});