Accounts.registerLoginHandler with passwords in Meteor

问题

I'm new to meteor and am stuck on registering a login handler that lets me use the password to authenticate the user.

I'm working off the code from http://meteorhacks.com

The server side code is as follows:

Accounts.registerLoginHandler(function(loginRequest) {
var userId = null;
var user = Meteor.users.findOne({'emails.address': loginRequest.email, password: loginRequest.password, 'proile.type': loginRequest.type});
if(user) {
  userId = user._id;
}
return { id: userId}

This works fine if I take out the password field and just use the email and type ones. How do I get this working with the password as well?

回答1:

Bottom line, you can't directly search via the plaintext password. You need to verify the password via SRP which is a little tricky as there isn't any documentation on it. Luckily Meteor is open source! A good start is at the accounts-password : https://github.com/meteor/meteor/blob/master/packages/accounts-password/password_server.js

There already is a package that can do password logins for you (the one the above file is from). You can add it to your project via meteor add accounts-password.

Then you could login with Meteor.loginWithPassword

来源：https://stackoverflow.com/questions/17275322/accounts-registerloginhandler-with-passwords-in-meteor