From 33472658371ffe37d14ad58652d0cccf3f6a784b Mon Sep 17 00:00:00 2001
From: coderaiser <mnemonic.enemy@gmail.com>
Date: Mon, 30 Dec 2013 14:37:15 +0000
Subject: [PATCH] fix(express) if username or password is change, auth do not
 work

---
 lib/server/express.js | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/lib/server/express.js b/lib/server/express.js
index 98754d22..2d1f07af 100644
--- a/lib/server/express.js
+++ b/lib/server/express.js
@@ -14,6 +14,8 @@
         httpAuth            = main.require('http-auth'),
         crypto              = main.crypto,
         basic,
+        oldPass,
+        oldName,
         app                 = express && express();
     
     exports.getApp          = function(controller) {
@@ -46,10 +48,26 @@
                 equal   = username === name,
                 sha     = crypto.createHash('sha1');
             
+            if (!oldPass)
+                oldPass = passwd;
+            
+            if (!oldName)
+                oldName = name;
+            
+            if (!equal)
+                username === oldName;
+            
             sha.update(password);
             hash        = sha.digest('hex');
             equal       = passwd === hash && equal;
             
+            if (!equal) {
+                 sha    = crypto.createHash('sha1');
+                 sha.update(oldPass);
+                 hash   = sha.digest('hex');
+                 equal  = passwd === hash && equal;
+            }
+            
             callback(equal);
         });
     }