What is the recommended way to implement user authentication using bcrypt.compare() in a Node.js API?

The recommended way is to: 1. Hash the user's password securely using `bcrypt.hash()` during registration or password changes and store the resulting hash. 2. When a user attempts to log in, retrieve their stored hash from the database. 3. Use `bcrypt.compare()` to compare the submitted plaintext password with the retrieved hash. 4. If `bcrypt.compare()` returns `true`, grant access; otherwise, deny access.