allow xhr response about passport-local HOT 2 CLOSED

I would suggest using the alternate form of authentication commented out in the example.

// POST /login
// This is an alternative implementation that uses a custom callback to
// acheive the same functionality.
/*
app.post('/login', function(req, res, next) {
passport.authenticate('local', function(err, user, info) {
if (err) { return next(err) }
if (!user) {
req.flash('error', info.message);
return res.redirect('/login')
}
req.logIn(user, function(err) {
if (err) { return next(err); }
return res.redirect('/users/' + user.username);
});
})(req, res, next);
});
*/

And replacing res.redirects() with res.json({message: 'error'}, 401) or similar.

from passport-local.

There is now a failWithError option. See here and here for sample usage.

from passport-local.