password.ts RawHistoryFolder

1import crypto from 'crypto';
2
3/**
4 * Securely hashes a password using PBKDF2 with a random salt.
5 * @param password The plain text password to hash
6 * @returns A promise that resolves to the hashed password in the format 'salt:hash'
7 */
8export async function hashPassword(password: string): Promise<string> {
9    return new Promise((resolve, reject) => {
10        const salt = crypto.randomBytes(16).toString('hex');
11        crypto.pbkdf2(password, salt, 100000, 64, 'sha512', (err, derivedKey) => {
12            if (err) return reject(err);
13            resolve(`${salt}:${derivedKey.toString('hex')}`);
14        });
15    });
16}
17
18/**
19 * Verify a password hash created by hashPassword()
20 * @param password The plain text password to verify
21 * @param hash The hashed password to verify against
22 * @returns A promise that resolves to true if the password matches, false otherwise
23 */
24export async function verifyPassword(password: string, hash: string): Promise<boolean> {
25    return new Promise((resolve, reject) => {
26        const [salt, key] = hash.split(':');
27        crypto.pbkdf2(password, salt, 100000, 64, 'sha512', (err, derivedKey) => {
28            if (err) return reject(err);
29            resolve(key === derivedKey.toString('hex'));
30        });
31    });
32}