const jwt = require('jsonwebtoken') //... async login(req, res) { if(!req.body.name || !req.body.password) { res.status(400).send({ message: "Hiba! A felhasználónév vagy jelszó hibás!" }) return } const user = { name: req.body.name, password: bcrypt.hashSync(req.body.password) } User.findOne({ where: { name: req.body.name } }) .then(user => { if(!user) { return res.status(404).send({ message: "User not found."}) } var passwordIsValid = bcrypt.compareSync( req.body.password, user.password ); if(!passwordIsValid) { res.status(401).send({ accessToken: null, message: "Invalid password!" }); } var token = jwt.sign({ id: user.id }, process.env.APP_KEY, { expiresIn: 86400 //24 óra }); res.status(200).send({ id: user.id, name: user.name, email: user.email, accessToken: token }); }) }