User.js

"use strict";

var bcrypt = require('bcrypt');

function hashPassword(attrs, next) {
    bcrypt.genSalt(10, function(err, salt) {
        if (err) return next(err);

        bcrypt.hash(attrs.password, salt, function(err, hash) {
            if (err) return next(err);

            attrs.encryptedPassword = hash;
            next();
        });
    });
}

var User = {

    schema: true,

    attributes: {
        firstName: { type: 'string', required: true },
        lastName: { type: 'string', required: true },
        email: { type: 'string', unique: true, required: true },
        encryptedPassword: { type: 'string', required: true },
        role: { type: 'integer', required: true }
    },
    beforeCreate: function(values, next) {
        hashPassword(values, next);

    },
};

module.exports = User;

UserController.js

module.exports = {
    create: function (req, res, next) {
        var params = req.params.all();
        User.create(params, function(err, user){
            if(err) return next(err);

            res.status(201);
            res.json(user);
        });
    }
};