Send username/password in body and fix cli

[perso/Immae/Projets/Nodejs/Surfer.git] / src / auth.js

diff --git a/src/auth.js b/src/auth.js
index 8645d4cb2291155d62e9c84716d5793d743ec6aa..5f83cea3e9e8321027ce9d00fdd24ad53630d43d 100644 (file)
--- a/src/auth.js
+++ b/src/auth.js
@@ -47,13 +47,13 @@ if (LDAP_URL && LDAP_USERS_BASE_DN) {
         function (req, res, next) {
             var users = safe.JSON.parse(safe.fs.readFileSync(LOCAL_AUTH_FILE));
             if (!users) return res.send(401);
-            if (!users[req.query.username]) return res.send(401);
+            if (!users[req.body.username]) return res.send(401);
 
-            bcrypt.compare(req.query.password, users[req.query.username].passwordHash, function (error, valid) {
+            bcrypt.compare(req.body.password, users[req.body.username].passwordHash, function (error, valid) {
                 if (error || !valid) return res.send(401);
 
                 req.user = {
-                    username: req.query.username
+                    username: req.body.username
                 };
 
                 next();
@@ -91,8 +91,6 @@ passport.use(new BearerStrategy(function (token, done) {
 }));
 
 exports.logout = function (req, res, next) {
-    console.log(req.authInfo);
-
     delete gTokenStore[req.authInfo.accessToken];
 
     next(new HttpSuccess(200, {}));