问如何通过passport认证和passport-local包在nodejs中添加‘更改密码’功能？

EN

var passport = require('passport');
var LocalStrategy = require('passport-local').Strategy;

passport.serializeUser(function (user, done) {
  done(null, user._id);
});

passport.deserializeUser(function (id, done) {
  User.findOne({_id: id}, function (err, user) {
    done(err, user);
  })
});

passport.use(new LocalStrategy({
    usernameField: 'email'
  },
  function (username, password, done) {
    User.findOne({email: username}, function (err, user) {
      if (err) return done(err);
      if (!user) {
        return done(null, false, {
          message: 'Incorrect username or password'
        });
      }
      if (!user.validPassword(password)) {
        return done(null, false, {
          message: 'Incorrect username or password'
        });
      }

      return done(null, user);
    })
  }
));

var mongoose = require('mongoose');
var crypto = require('crypto');

var userSchema = new mongoose.Schema({
  email: {
    type: String,
    unique: true,
    required: true
  },
  name: {
    type: String,
    required: true
  },

  hash: String,
  salt: String
 
});

userSchema.methods.setPassword = function(password) {
  this.salt = crypto.randomBytes(16).toString('hex');
  this.hash = crypto.pbkdf2Sync(password, this.salt, 1000, 64, 'sha1').toString('hex');
};

userSchema.methods.validPassword = function(password) {
  var hash = crypto.pbkdf2Sync(password, this.salt, 1000, 64, 'sha1').toString('hex');
  return this.hash === hash;
};

module.exports = mongoose.model('User', userSchema);

   var express = require('express');
    var router = express.Router();
    var passport = require('passport');
    var mkdirp = require('mkdirp');
    
    var nodemailer = require('nodemailer');
    var config = require('../config');
    var transporter = nodemailer.createTransport(config.mailer);
    
    
    
    router.route('/login')
      .get(function(req, res, next) {
        res.render('login', { title: 'Login your account'});
      })
      .post(passport.authenticate('local', {
        failureRedirect: '/login'
      }), function (req, res) {
      res.redirect('/profile');
})

 router.post('/api/changePassword', function(req,res,next){
      req.checkBody('oldPass', 'Empty Password').notEmpty();
      req.checkBody('newPass', 'Password do not match').equals(req.body.confirmPass).notEmpty();

      var errors = req.validationErrors();
      if (errors) {
        console.log("Errors hain bhai");
        console.log(errors);
        res.render('settingsClient', {
          oldPass: req.body.oldPass,
          newPass: req.body.newPass,
          confirmPass:req.body.confirmPass,
          errorMessages: errors
        });
      }
      else {

       User.findOne({id: req.user.id}, function (err, data) {
         console.log("came inside api changePassword else condition inside User.findOne");
         if (err) {
          console.log(err);
         }
         else {
       data.setPassword(req.body.newPass, function(err,datas){
         if(datas) {
         data.save(function (err,datass) {
          if (err) {
            res.render('settingsClient', {errorMessages: err});
          } else {
            console.log("Hash and Salt saved");
          }
        });
      }
      else {
        console.log("setPassword error"+ err);
      }
       });
    }
      })
    }
    })