First layer of authentication

user-controller-login.js

userController.login = function (req, reply) {
  if (isValidUserRequest(req)) {
    let user = db.getCleanedUser(req.body.email);
    if (typeof user !== 'undefined') {
      if (bcrypt.compareSync(req.body.password, user.password)) {
        delete user.password;
        const token = jwt.sign(user, config.jwt.secret);
        const newUser = { ...user, token };
        reply.code(200).send(newUser);
      }
    }
  }
  reply.unauthorized('Invalid login. Please try again.');
};