@quarks/quarks-iam/oidc/sessionState.js

A modern authorization server built to authenticate your users and protect your APIs

/**
 * Module dependencies
 */

var crypto = require('crypto')

/**
 * Session State
 */

function sessionState (client, origin, state) {
  var salt = crypto.randomBytes(16).toString('hex')
  var value = [client._id, client.client_uri, state, salt].join(' ')
  var sha256 = crypto.createHash('sha256')
  sha256.update(value)
  var hash = sha256.digest('hex')
  return [hash, salt].join('.')
}

/**
 * Exports
 */

module.exports = sessionState