How to use

ExpressBrute

in

express-brute

app.use(bruteforce.prevent, function(req, res, next) {
      var user = basicAuth(req);
      if (user && user.name === auth.username && user.pass === auth.password) {
        // Successful authentication, reset rate limiting.
        req.brute.reset(next);
      } else {
        res.statusCode = 401;
        res.setHeader('WWW-Authenticate', 'Basic realm="terriajs-server"');
        res.end('Unauthorized');
      }
    });

router.route('/userCheck/username/:id').get(bruteforcedupe.prevent, function(req, res, next) {
    const { id } = req.params;
    db.from('users')
        .select('username')
        .where('username', id)
        .then(row => {
            if (row.length > 0) {
                const rowsend = row[0];
                res.status(200);
                res.json(rowsend);
            } else {
                const rowsend = {
                    username: '',
                    password: '',
                    givenname: '',
                    surname: '',
                    email: '',
                    role: 'user',
                    status: 'active',
                };
                res.status(200);
                res.json(rowsend);
            }
        })
        .catch(err => {
            logger.main.error(err);
            return next(err);
        });
});

.post(bruteforcelogin.prevent, function(req, res, next) {
    passport.authenticate('login-user', (err, user) => {
        if (err) {
                            .then(() => {
                                bruteforcelogin.reset(null);
                                if (user.role !== 'admin') {
                                    res.status(200).send({

router.route('/userCheck/email/:id').get(bruteforcedupe.prevent, function(req, res, next) {
    const { id } = req.params;
    db.from('users')
        .select('email')
        .where('email', id)
        .then(row => {
            if (row.length > 0) {
                const rowsend = row[0];
                res.status(200);
                res.json(rowsend);
            } else {
                const rowsend = {
                    username: '',
                    password: '',
                    givenname: '',
                    surname: '',
                    email: '',
                    role: 'user',
                    status: 'active',
                };
                res.status(200);
                res.json(rowsend);
            }
        })
        .catch(err => {
            logger.main.error(err);
            return next(err);
        });
});