@reldens/server-utils 0.14.0 → 0.16.0

package/README.md

@@ -12,6 +12,7 @@ A set of helpers for Node.js to create a server and handle files.
 - File handler.
 - Express server factory.
 - Multer uploader factory.
+- Password manager.
 
 Need something specific?
 

package/index.js

@@ -7,9 +7,11 @@
 const { FileHandler } = require('./lib/file-handler');
 const { AppServerFactory } = require('./lib/app-server-factory');
 const { UploaderFactory } = require('./lib/uploader-factory');
+const { Encryptor } = require('./lib/encryptor');
 
 module.exports = {
     FileHandler,
     AppServerFactory,
-    UploaderFactory
+    UploaderFactory,
+    Encryptor
 };

package/lib/app-server-factory.js

@@ -26,30 +26,29 @@ class AppServerFactory
         this.appServer = false;
         this.app = express();
         this.rateLimit = rateLimit;
-        this.useCors = 1 === Number(process.env.RELDENS_USE_CORS || 1);
-        this.useExpressJson = 1 === Number(process.env.RELDENS_USE_EXPRESS_JSON || 1);
-        this.useUrlencoded = 1 === Number(process.env.RELDENS_USE_URLENCODED || 1);
-        this.encoding = String(process.env.RELDENS_DEFAULT_ENCODING || 'utf-8');
-        this.useHttps = 1 === Number(process.env.RELDENS_EXPRESS_USE_HTTPS || 0);
-        this.passphrase = String(process.env.RELDENS_EXPRESS_HTTPS_PASSPHRASE || '');
-        this.httpsChain = String(process.env.RELDENS_EXPRESS_HTTPS_CHAIN || '');
-        this.keyPath = String(process.env.RELDENS_EXPRESS_HTTPS_PRIVATE_KEY || '');
-        this.certPath = String(process.env.RELDENS_EXPRESS_HTTPS_CERT || '');
-        this.trustedProxy = String(process.env.RELDENS_EXPRESS_TRUSTED_PROXY || '');
-        this.windowMs = Number(process.env.RELDENS_EXPRESS_RATE_LIMIT_MS || 60000);
-        this.maxRequests = Number(process.env.RELDENS_EXPRESS_RATE_LIMIT_MAX_REQUESTS || 30);
-        this.applyKeyGenerator = 1 === Number(process.env.RELDENS_EXPRESS_RATE_LIMIT_APPLY_KEY_GENERATOR || 0);
-        this.jsonLimit = String(process.env.RELDENS_EXPRESS_JSON_LIMIT || '1mb');
-        this.urlencodedLimit = String(process.env.RELDENS_EXPRESS_URLENCODED_LIMIT || '1mb');
-        this.useHelmet = 1 === Number(process.env.RELDENS_USE_HELMET || 1);
-        this.useXssProtection = 1 === Number(process.env.RELDENS_USE_XSS_PROTECTION || 1);
-        this.globalRateLimit = 1 === Number(process.env.RELDENS_GLOBAL_RATE_LIMIT || 0);
-        this.corsOrigin = String(process.env.RELDENS_CORS_ORIGIN || '*');
-        this.corsMethods = String(process.env.RELDENS_CORS_METHODS || 'GET,POST').split(',');
-        this.corsHeaders = String(process.env.RELDENS_CORS_HEADERS || 'Content-Type,Authorization').split(',');
-        this.tooManyRequestsMessage = String(
-            process.env.RELDENS_TOO_MANY_REQUESTS_MESSAGE || 'Too many requests, please try again later.'
-        );
+        this.useCors = true;
+        this.useExpressJson = true;
+        this.useUrlencoded = true;
+        this.encoding = 'utf-8';
+        this.useHttps = false;
+        this.passphrase = '';
+        this.httpsChain = '';
+        this.keyPath = '';
+        this.certPath = '';
+        this.trustedProxy = '';
+        this.windowMs = 60000;
+        this.maxRequests = 30;
+        this.applyKeyGenerator = false;
+        this.jsonLimit = '1mb';
+        this.urlencodedLimit = '1mb';
+        this.useHelmet = true;
+        this.helmetConfig = false;
+        this.useXssProtection = true;
+        this.globalRateLimit = 0;
+        this.corsOrigin = '*';
+        this.corsMethods = ['GET','POST'];
+        this.corsHeaders = ['Content-Type','Authorization'];
+        this.tooManyRequestsMessage = 'Too many requests, please try again later.';
         this.error = {};
         this.processErrorResponse = false;
     }
@@ -60,7 +59,7 @@ class AppServerFactory
             Object.assign(this, appServerConfig);
         }
         if(this.useHelmet){
-            this.app.use(helmet());
+            this.app.use(this.helmetConfig ? helmet(this.helmetConfig) : helmet());
         }
         if(this.useCors){
             let corsOptions = {

package/lib/encryptor.js

@@ -0,0 +1,47 @@
+/**
+ *
+ * Reldens - Encryptor
+ *
+ */
+
+let crypto = require('crypto');
+
+class Encryptor
+{
+
+    constructor()
+    {
+        // recommended minimum for PBKDF2 with SHA-512
+        this.iterations = 60000;
+        this.keylen = 64;
+        this.digest = 'sha512';
+    }
+
+    encryptPassword(password)
+    {
+        // generate the password hash:
+        let salt = crypto.randomBytes(16).toString('hex');
+        let hash = crypto.pbkdf2Sync(password, salt, this.iterations, this.keylen, this.digest ).toString('hex');
+        return salt + ':' + hash;
+    }
+
+    validatePassword(password, storedPassword)
+    {
+        let parts = storedPassword.split(':');
+        if(2 !== parts.length){
+            return false;
+        }
+        let salt = parts[0];
+        let storedHash = parts[1];
+        let hash = crypto.pbkdf2Sync(password, salt, this.iterations, this.keylen, this.digest).toString('hex');
+        return storedHash === hash;
+    }
+
+    generateSecretKey()
+    {
+        return crypto.randomBytes(32).toString('hex');
+    }
+
+}
+
+module.exports.Encryptor = new Encryptor();

package/package.json

@@ -1,7 +1,7 @@
 {
     "name": "@reldens/server-utils",
     "scope": "@reldens",
-    "version": "0.14.0",
+    "version": "0.16.0",
     "description": "Reldens - Server Utils",
     "author": "Damian A. Pastorini",
     "license": "MIT",