router.post("/login", async (req, res) => { try { const user = await User.findOne({ email: req.body.email }); if (!user) return res.status(401).json("Wrong Credentials!"); var salt = process.env.SALT; //SALT var hashedPassword = CryptoJS.PBKDF2(req.body.masterPassword, salt, { //HASHED PWD keySize: 256 / 32, }); const decryptedPassword = CryptoJS.AES.decrypt( user.masterPassword, process.env.PASS_SEC ).toString(); console.log(decryptedPassword+" "+hashedPassword) if (hashedPassword === decryptedPassword) { res.status(200).json(user); } else { res.status(401).json("pwd dont match!"); } } catch (err) { res.status(500).json(err); } });

console.log(decryptedPassword+" "+hashedPassword) devuelve 8da9d88c32a0246a66ed3a70b8e3a9c34d46112ebb3b2e891172e5773bfa80dd 8da9d88c32a0246a66ed3a70b8e3a9c34d2e57103b2e5703b2e570dd3b2