passport.js

'use strict';

var mongoose = require('mongoose'),
		LocalStrategy = require('passport-local').Strategy,
		User = mongoose.model('User');

module.exports = function(passport) {

	// Serialize the user id to push into the session
	passport.serializeUser(function (user, done) {
		done(null, user.id);
	});

	// Deserialize the user object based on a pre-serialized token
	// which is the user id
	passport.deserializeUser(function (id, done) {
		User.findOne({
			_id: id
		}, '-salt -hashed_password', function (err, user) {
			done(err, user);
		});
	});

	// Local Strategy
	passport.use(new LocalStrategy({
			usernameField: 'email',
			passwordField: 'password'
		},
		function (email, password, done) {
			User.findOne({
				email: email
			}, function (err, user) {
				if (err) {
					return done(err);
				}
				if (!user) {
					return done(null, false, {
						message: 'Unknown user'
					});
				}
				if (!user.authenticate(password)) {
					return done(null, false, {
						message: 'Invalid password'
					});
				}
				return done(null, user);
			});
		}
	));
};