lin-cms-test/lin/passwordHash.js

The core library of Lin CMS, this package is just for test!

"use strict";
Object.defineProperty(exports, "__esModule", { value: true });
const tslib_1 = require("tslib");
/**
 * 借鉴 node-password-hash link: https://github.com/davidwood/node-password-hash
 * 实现原理与werkzeug的原理基本一样
 */
const crypto_1 = tslib_1.__importDefault(require("crypto"));
let saltChars = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789";
let saltCharsCount = saltChars.length;
function generateSalt(len) {
    if (crypto_1.default.randomBytes) {
        return crypto_1.default
            .randomBytes(Math.ceil(len / 2))
            .toString("hex")
            .substring(0, len);
    }
    else {
        let salt = "";
        for (let i = 0; i < len; i++) {
            salt += saltChars.charAt(Math.floor(Math.random() * saltCharsCount));
        }
        return salt;
    }
}
function generateHash(algorithm, salt, password, iterations) {
    iterations = iterations || 1;
    try {
        let hash = password;
        for (let i = 0; i < iterations; ++i) {
            hash = crypto_1.default
                .createHmac(algorithm, salt)
                .update(hash)
                .digest("hex");
        }
        return algorithm + "$" + salt + "$" + iterations + "$" + hash;
    }
    catch (e) {
        throw new Error("Invalid message digest algorithm");
    }
}
exports.generate = function (password, options) {
    options || (options = {});
    options.algorithm || (options.algorithm = "sha1");
    options.saltLength || options.saltLength === 0 || (options.saltLength = 8);
    options.iterations || (options.iterations = 1);
    let salt = generateSalt(options.saltLength);
    return generateHash(options.algorithm, salt, password, options.iterations);
};
exports.verify = function (password, hashedPassword) {
    if (!password || !hashedPassword)
        return false;
    let parts = hashedPassword.split("$");
    if (parts.length !== 4)
        return false;
    try {
        const iter = parseInt(parts[2], 10);
        return generateHash(parts[0], parts[1], password, iter) === hashedPassword;
    }
    catch (e) {
        return false;
    }
};
exports.isHashed = function (password) {
    if (!password)
        return false;
    return password.split("$").length === 4;
};