Hash password before saving user

package.json

@@ -14,6 +14,7 @@
   "author": "",
   "license": "ISC",
   "dependencies": {
+    "bcryptjs": "^2.4.3",
     "body-parser": "^1.18.3",
     "crypto-js": "^3.1.9-1",
     "expect": "^23.6.0",

server/middleware/authenticate.js

@@ -1,6 +1,6 @@
 const { User } = require("./../models/user");
 
-var authenticate = (res, res, next) => {
+var authenticate = (req, res, next) => {
   var token = req.header('x-auth');
 
   User.findByToken(token).then((user) => {

server/models/user.js

@@ -2,6 +2,7 @@ const mongoose = require('mongoose');
 const validator = require('validator');
 const jwt = require('jsonwebtoken');
 const _ = require('lodash');
+const bcrypt = require('bcryptjs');
 
 var UserSchema = new mongoose.Schema({
   email: {
@@ -73,6 +74,22 @@ UserSchema.statics.findByToken = function (token) {
   });
 };
 
+UserSchema.pre('save', function(next) {
+  var user = this;
+
+  if (user.isModified('password')) {
+    bcrypt.genSalt(10, (err, salt) =>{
+      bcrypt.hash(user.password, salt, (err, hash) => {
+        user.password = hash;
+        next();
+      });
+    });
+  } else {
+    next();
+  }
+
+});
+
 var User = mongoose.model('User', UserSchema);
 
 module.exports = { User };