How to Implement ACL with Passport using Node.js ?

// STEP 1: Install all the necessary dependencies 
// add the dependencies with the help of require

const express = require('express')
const app = express()

// To run our app on port 3000
app.listen(3000)

// Requiring all the necessary dependencies
const express = require('express')
const app = express()
const bcrpyt = require('bcrypt')

const users = []

// In order to use ejs set up view-engine
app.set('view-engine', 'ejs')
app.use(express.urlencoded({ extended: false }))

// Setting up home-page route
app.get('/', (req, res) => {
    res.render('index.ejs', { name: 'Janhvi' })
})

// Set up login page route
app.get('/login', (req, res) => {
    res.render('login.ejs')
})

// Set up register page route
app.get('/register', (req, res) => {
    res.render('register.ejs')
})

app.post('/register', async (req, res) => {
    
    // Using try catch block in order to 
    // resolve errors
    try {
        
        // Hashing password with bcrypt
        const hashedPassword = 
            await bcrpyt.hash(req.body.password, 10)
        users.push({
            id: Date.now().toString(),
            name: req.body.name,
            email: req.body.email,
            password: hashedPassword
        })
        res.redirect('/login')
    } catch {
        res.redirect('/register')
    }
    console.log(users)
})

// To run our app on port 3000
app.listen(3000)

<!-- login page -->
<h1>Login</h1>

<!-- Make a simple login form with name, email 
    and password fields make a submit button 
    at end -->
<form action="/login" method="POST">
    <div>
        <label for="name">Name</label>
        <input type="text" id="name" 
            name="name" required>
    </div>
    <div>
        <label for="email">Email</label>
        <input type="email" id="email" 
            name="email" required>
    </div>
    <div>
        <label for="password">Password</label>
        <input type="password" 
            id="password" name="password" required>
    </div>
    <button type="submit">Login</button>
</form>
<a href="/register">Register</a>

<!-- Register page  -->
<h1>Register</h1>

<!-- Make a simple register form with 
    name, email and password fields
    make a submit button at end -->
<form action="/register" method="POST">
    <div>
        <label for="name">Name</label>
        <input type="text" id="name" 
            name="name" required>
    </div>
    <div>
        <label for="email">Email</label>
        <input type="email" id="email" 
            name="email" required>
    </div>
    <div>
        <label for="password">Password</label>
        <input type="password" id="password" 
            name="password" required>
    </div>
    <button type="submit">Register</button>
</form>
<a href="/login">Login</a>

// The below code is only suitable for 
// development not suitable for production
if (process.env.NODE_ENV !== 'production') {
    require('dotenv').config()
}

// Requiring all the necessary dependencies
const express = require('express')
const app = express()
const bcrypt = require('bcrypt')
const passport = require('passport')
const flash = require('express-flash')
const session = require('express-session')
const methodOverride = require('method-override')

const initializePassport = require('./passport-config')
initializePassport(
    passport,
    email => users.find(user => user.email === email),
    id => users.find(user => user.id === id)
)

const users = []

// Setting up the view-engine in order 
// to use ejs in code further
app.set('view-engine', 'ejs')
app.use(express.urlencoded({ extended: false }))
app.use(flash())
app.use(session({
    secret: process.env.SESSION_SECRET,
    resave: false,
    saveUninitialized: false
}))
app.use(passport.initialize())
app.use(passport.session())
app.use(methodOverride('_method'))

// Setting up route logic for home page
app.get('/', checkAuthenticated, (req, res) => {
    res.render('index.ejs', { name: req.user.name })
})

// Setting up route logic for login page
app.get('/login', checkNotAuthenticated, (req, res) => {
    res.render('login.ejs')
})

app.post('/login', checkNotAuthenticated, 
passport.authenticate('local', {
    successRedirect: '/',
    failureRedirect: '/login',
    failureFlash: true
}))

app.get('/register', checkNotAuthenticated, 
(req, res) => {
    res.render('register.ejs')
})

// Hashinhg the passwords for each user 
// using bcrypt
app.post('/register', checkNotAuthenticated, 
async (req, res) => {
    try {
        const hashedPassword = 
            await bcrypt.hash(req.body.password, 10)
        users.push({
            id: Date.now().toString(),
            name: req.body.name,
            email: req.body.email,
            password: hashedPassword
        })
        res.redirect('/login')
    } catch {
        res.redirect('/register')
    }
})

// To to login page upon pressing the
// logout button
app.delete('/logout', (req, res) => {
    req.logOut()
    res.redirect('/login')
})

// If user is authenticated redirect to 
// next page otherwise redirect to login
// page
function checkAuthenticated(req, res, next) {
    if (req.isAuthenticated()) {
        return next()
    }
    res.redirect('/login')
}

function checkNotAuthenticated(req, res, next) {
    if (req.isAuthenticated()) {
        return res.redirect('/')
    }
    next()
}

// To run our app on port 3000
app.listen(3000)

// Requiring all the necessary dependencies
const LocalStrategy = require('passport-local').Strategy
const bcrypt = require('bcrypt')

// Add all the code related to passportjs to
// the main initialize function
function initialize(passport, getUserByEmail, getUserById) {
    const authenticateUser = async (email, password, done) => {
        const user = getUserByEmail(email)

        // If user is null return output 
        // "no user with that email"
        if (user == null) {
            return done(null, false, 
                { message: 'No user with that email' })
        }

        // try-catch block to check for correct password
        try {
            if (await bcrypt.compare(password, user.password)) {
                return done(null, user)
            } else {
                return done(null, false, 
                    { message: 'Password incorrect' })
            }
        } catch (e) {
            return done(e)
        }
    }

    passport.use(new LocalStrategy(
        { usernameField: 'email' }, authenticateUser))
    passport.serializeUser((user, done) => done(null, user.id))
    passport.deserializeUser((id, done) => {
        return done(null, getUserById(id))
    })
}

// Exporting the initialize function
module.exports = initialize