hashy/cli.js

Hash passwords the right way (Argon2 & bcrypt support)

#!/usr/bin/env node

"use strict";

const yargs = require("yargs");
// TESTABILITY: makes yargs throws instead of exiting.
yargs.fail(function (msg) {
  let help = yargs.help();

  if (msg) {
    help += "\n" + msg;
  }

  throw help;
});

// --------------------------------------------------------------------

const hashy = require("./");

// ====================================================================

function main(argv) {
  const options = yargs
    .usage("Usage: hashy [<option>...]")
    .example("hashy [ -a <algorithm> ] <secret>", "hash the secret")
    .example("hashy <secret> <hash>", "verify the secret using the hash")
    .options({
      a: {
        default: hashy.DEFAULT_ALGO,
        describe: "algorithm to use for hashing",
      },
      h: {
        alias: "help",
        boolean: true,
        describe: "display this help message",
      },
      v: {
        alias: "version",
        boolean: true,
        describe: "display the version number",
      },
      c: {
        alias: "cost",
        describe: "cost for Bcrypt",
      },
    })
    .parse(argv);

  if (options.help) {
    return yargs.help();
  }

  if (options.version) {
    const pkg = require("./package");
    return "Hashy version " + pkg.version;
  }

  if (options.cost) {
    hashy.options.bcrypt.cost = +options.cost;
  }

  const args = options._;

  if (args.length === 1) {
    return hashy.hash(args[0], options.a).then(console.log);
  }

  if (args.length === 2) {
    const password = args[0];
    const hash = args[1];

    return hashy.verify(password, hash).then(function (success) {
      if (success) {
        if (hashy.needsRehash(hash, options.a)) {
          return "ok but password should be rehashed";
        }

        return "ok";
      }

      throw new Error("not ok");
    });
  }

  throw new Error("incorrect number of arguments");
}
exports = module.exports = main;

// ====================================================================

if (!module.parent) {
  require("exec-promise")(main);
}