Guide:-Login-Example.md

I'm working on including robust authentication code for new projects, but in the mean time, I created a gist showing a basic login action. It doesn't hash the password, or use a salt or anything, but hopefully it will give you an idea of how it works.

https://gist.github.com/mikermcneil/5040752

/*---------------------
  :: Session 
	-> controller
---------------------*/
var SessionController = {
 
	login: function(req, res) {
 
		// Get password and username from request
		var username = req.param('username');
		var password = req.param('password');
 
		// No username/password entered
		if(!(username && password)) {
			res.send("No username or password specified!",500);
			// TODO: redirect, storing an error in the session
		}
 
		else {
			// Lookup the username/password combination
			User.find({
				username: username,
				password: password // TODO: hash the password first
			}).done(function (err, user) {
 
				// Login failed, incorrect username/password combination
				if (err || !user) {
					res.send("Invalid username and password combination!",500);
					// TODO: redirect, storing an error in the session
				}
 
				// Login succeeded
				if (user) {
					req.session.authenticated = true;
					req.session.User = user;
 
					// Redirect to protected area
					res.redirect('/dashboard');
				}
			});
		}
	}
};
module.exports = SessionController;