ihave.to/server/classes/Security.js

Catch ideas. As they come and let them grow with your team in real time

/*global module*/
/*global require*/
/*global __dirname*/
/*global CONFIG*/
var Security = null;
(function () {
    "use strict";

    /**
     * Handles verfifier creation and reading for security purposes
     * @module Server
     * @submodule Classes
     * @class Security
     * @constructor
     */
    Security = function () {
        if (!this.fs.existsSync(CONFIG.ROOT + 'settings/salt')) {
            this.fs.writeFileSync(CONFIG.ROOT + 'settings/salt', this.oCrypto.randomBytes(2048).toString('base64'));
        }

        this._salt = this.fs.readFileSync(CONFIG.ROOT + 'settings/salt', 'UTF-8');
    };

    /**
     * Node js filesystem opertions class
     * @property fs
     * @type {Function}
     */
    Security.prototype.fs = require('fs');

    /**
     * Node js crypto library
     * @property oCrypto
     * @type {Function}
     */
    Security.prototype.oCrypto = require('crypto');

    /**
     * String functions
     *
     * @property oString
     * @type {Function}
     */
    Security.prototype.oString = require(__dirname + '/String');

    /**
     * The salst for creating the verifier
     * @property _salt
     * @type {String}
     * @private
     */
    Security.prototype._salt = null;

    /**
     * Create the verifier by given basestring
     * @method createVerifier
     * @param {String} sBase
     * @return {String} The verifierstring
     */
    Security.prototype.createVerifier = function (sBase) {
        var sBaseRev = new this.oString(sBase).reverse();
        var sPreHash = this._salt + sBaseRev;

        return this.oCrypto.createHash('sha512').update(sPreHash).digest('hex');
    };

    /**
     * Read the verifier from according file
     * @method getVerifier
     * @param {String} sVerifierFile
     * @return {String}
     */
    Security.prototype.getVerifier = function (sVerifierFile) {
        return this.fs.readFileSync(sVerifierFile, 'UTF-8');
    };
})
    ();

module.exports = Security;