bower ; local auth stuff

1 files changed, 17 insertions, 3 deletions

diff --git a/server/lib/auth.js b/server/lib/auth.js
index 22917c3..b7a2772 100644
--- a/server/lib/auth.js
+++ b/server/lib/auth.js
@@ -14,6 +14,8 @@ var auth = {
 		passport.serializeUser(auth.serializeUser);
 		passport.deserializeUser(auth.deserializeUser);
 		
+		passport.use(auth.verifyLocalUser)
+		
 		passport.use(new TwitterStrategy({
 			consumerKey: process.env.VVALLS_TWITTER_KEY || '0L5blfBIapqhpons8bCXdIoGM',
 			consumerSecret: process.env.VVALLS_TWITTER_SECRET || '5EKW7m7inoODqYSKbp7cadBKFp1FghBl4MBDoXNcUjKtodZfuP',
@@ -56,7 +58,7 @@ var auth = {
 		accept(null, false);
 	},
 
-	// technically these returns the login middleware
+	// technically these return the login middleware
 	login: function (strategy) {
 		return passport.authenticate(strategy);
 	},
@@ -83,6 +85,19 @@ var auth = {
 		});
 	},
 
+	verifyLocalUser: function (username, password, done) {
+		User.findOne({ username: username }, function(err, user){
+			if (err) { return done(err); }
+			if (!user) {
+				return done(null, false, { message: 'Incorrect username.' });
+			}
+			if (! user.validPassword(password)) {
+				return done(null, false, { message: 'Incorrect password.' });
+			}
+			return done(null, user);
+		});
+	},
+
 	insertTwitterUser: function (accessToken, refreshToken, profile, done) {
 		process.nextTick(function () {
 			var userData = {
@@ -90,7 +105,7 @@ var auth = {
 				username: profile.username,
 				displayName: profile.displayName,
 				photo: profile.photos[0].value,
-				links: ["https://twitter.com/" + profile.username]
+				twitterName: profile.username,
 			};
 			
 			User.findOne({twitter_id: profile.id}, function(err, data){
@@ -114,7 +129,6 @@ var auth = {
 				username: profile.username || profile.displayName.toLowerCase().replace(/ /g,'-'),
 				displayName: profile.displayName,
 				photo: "http://graph.facebook.com/" + profile.id + "/picture?type=large",
-				links: [profile.profileUrl]
 			};
 
 			User.findOne({facebook_id: profile.id}, function(err, data){