@dyrected/core 2.5.11 → 2.5.13

package/dist/chunk-G2QQLBHW.js

@@ -0,0 +1,24 @@
+// src/auth/password.ts
+import { promisify } from "util";
+import { scrypt, randomBytes, timingSafeEqual } from "crypto";
+var scryptAsync = promisify(scrypt);
+var SALT_LEN = 16;
+var KEY_LEN = 64;
+async function hashPassword(plain) {
+  const salt = randomBytes(SALT_LEN).toString("hex");
+  const derivedKey = await scryptAsync(plain, salt, KEY_LEN);
+  return `${salt}:${derivedKey.toString("hex")}`;
+}
+async function verifyPassword(plain, stored) {
+  const [salt, storedHash] = stored.split(":");
+  if (!salt || !storedHash) return false;
+  const derivedKey = await scryptAsync(plain, salt, KEY_LEN);
+  const storedBuffer = Buffer.from(storedHash, "hex");
+  if (derivedKey.length !== storedBuffer.length) return false;
+  return timingSafeEqual(derivedKey, storedBuffer);
+}
+
+export {
+  hashPassword,
+  verifyPassword
+};