Setup email and password validation

shopping-cart/app.js

@@ -8,6 +8,7 @@ var mongoose = require('mongoose');
 var session = require('express-session');
 var passport = require('passport');
 var flash = require('connect-flash');
+var validator = require('express-validator');
 
 var indexRouter = require('./routes/index');
 
@@ -23,6 +24,7 @@ app.set('view engine', '.hbs');
 app.use(logger('dev'));
 app.use(express.json());
 app.use(express.urlencoded({ extended: false }));
+app.use(validator());
 app.use(cookieParser());
 app.use(session({ secret: 'mySuperSecretSecret', resave: false, saveUninitialized: false }));
 app.use(flash());

shopping-cart/config/passport.js

@@ -17,6 +17,16 @@ passport.use('local.signup', new LocalStrategy({
   passwordField: 'password',
   passReqToCallback: true
 }, (req, email, password, done) => {
+  req.checkBody('email', 'Invalid email').isEmail();
+  req.checkBody('password', 'Invalid password').isLength({ min: 4 });
+  var errors = req.validationErrors();
+  if (errors) {
+    messages = [];
+    errors.forEach((error) => {
+      messages.push(error.msg);
+    });
+    return done(null, false, req.flash('error', messages));
+  }
   User.findOne({'email': email}, (err, user) => {
     if (err) {
       return done(err);

shopping-cart/package.json

@@ -14,6 +14,7 @@
     "express": "~4.16.0",
     "express-handlebars": "^3.0.0",
     "express-session": "^1.15.6",
+    "express-validator": "^5.3.0",
     "hbs": "~4.0.1",
     "http-errors": "~1.6.2",
     "mongoose": "^5.2.14",