gitlab-acebase/dist/esm/shared/password.js

AceBase realtime database server (webserver endpoint to allow remote connections)

import * as crypto from 'crypto';
export const generatePassword = () => {
    return Array.prototype.reduce.call('abcedefghijkmnopqrstuvwxyzABCDEFGHIJKLMNPQRSTUVWXYZ012345789!@#$%&', (password, c, i, chars) => {
        if (i > 15) {
            return password;
        }
        return password + chars[Math.floor(Math.random() * chars.length)];
    }, '');
};
/**
 * Generates a random salt and hashes the provided password with it. The resulting salt and hash should be stored in the database
 * @param password password to hash
 */
export const createPasswordHash = (password) => {
    const length = 16;
    const salt = crypto.randomBytes(Math.ceil(length / 2)).toString('hex').slice(0, length);
    const hash = crypto.createHmac('sha512', salt).update(password).digest('hex');
    return {
        salt,
        hash,
    };
};
/**
 * For checking passwords: uses given password and salt to get the hash that can be compared to a stored version.
 * @param password A password prodived by the user trying to sign in
 * @param salt the salt used to generate the hash, must be stored with the hash in the database
 */
export const getPasswordHash = (password, salt) => {
    return crypto.createHmac('sha512', salt).update(password).digest('hex');
};
/**
 * Backward compatibility with old saltless md5 passwords. Becomes obsolete once all passwords have been updated (probably already so)
 */
export const getOldPasswordHash = (password) => {
    // Backward compatibility with old saltless md5 passwords.
    // Becomes obsolete once all passwords have been updated
    return crypto.createHash('md5').update(password).digest('hex');
};
//# sourceMappingURL=password.js.map