Function login

services/cloudUser.js:23–88

(appId, username, password, accessList, isMasterKey, encryption_key)

const userService = {

  login(appId, username, password, accessList, isMasterKey, encryption_key) {
    const deferred = q.defer();

    try {
      customService.findOne(appId, Collections.User, {
        username,
      }, null, null, null, accessList, isMasterKey).then((user) => {
        if (!user) {
          deferred.reject('Invalid Username');
          return;
        }

        let encryptedPassword;
        let isAuthenticatedUser = false;
        if (encryption_key && encryption_key.iv && encryption_key.key) {
          encryptedPassword = encryptText(cipher_alg, encryption_key.key, encryption_key.iv, password);
        } else {
          encryptedPassword = crypto.pbkdf2Sync(password, config.secureKey, 10000, 64, 'sha1').toString('base64');
        }
        if (encryptedPassword === user.password) {
          isAuthenticatedUser = true;
        }

        appService.getAllSettings(appId).then((appSettings) => {
          const auth = _.first(_.where(appSettings, {
            category: 'auth',
          }));
          let signupEmailSettingsFound = false;
          let allowOnlyVerifiedLogins = false;

          if (auth && auth.settings && auth.settings.signupEmail) {
            signupEmailSettingsFound = true;
            if (auth.settings.signupEmail.allowOnlyVerifiedLogins) {
              allowOnlyVerifiedLogins = true;
            }
          }

          if (isAuthenticatedUser) {
            if (signupEmailSettingsFound && allowOnlyVerifiedLogins) {
              if (user.verified) {
                deferred.resolve(user);
              } else {
                deferred.reject('User is not verified');
              }
            } else {
              deferred.resolve(user);
            }
          } else {
            deferred.reject('User is not authenticated');
          }
        }, (error) => {
          deferred.reject(error);
        });
      }, (error) => {
        deferred.reject(error);
      });
    } catch (err) {
      winston.log('error', {