@ttoss/auth-core 0.1.11 → 0.2.0

package/dist/esm/index.js

@@ -7,4 +7,34 @@ var encode = obj => {
 var decode = encoded => {
   return JSON.parse(Buffer.from(encoded, "base64").toString("utf8"));
 };
-export { decode, encode };
+
+// src/hash.ts
+import crypto from "node:crypto";
+var ITERATIONS = 1e3;
+var KEY_LENGTH = 64;
+var DIGEST = "sha256";
+var hashPassword = plainPassword => {
+  const salt = crypto.randomBytes(16).toString("hex");
+  return new Promise((resolve, reject) => {
+    crypto.pbkdf2(plainPassword, salt, ITERATIONS, KEY_LENGTH, DIGEST, (err, derivedKey) => {
+      if (err) {
+        reject(err);
+      }
+      const hash = derivedKey.toString("hex");
+      resolve(`${salt}:${hash}`);
+    });
+  });
+};
+var comparePassword = (plainPassword, storedHash) => {
+  const [salt, hash] = storedHash.split(":");
+  return new Promise((resolve, reject) => {
+    crypto.pbkdf2(plainPassword, salt, ITERATIONS, KEY_LENGTH, DIGEST, (err, derivedKey) => {
+      if (err) {
+        reject(err);
+      }
+      const hashToCompare = derivedKey.toString("hex");
+      resolve(hash === hashToCompare);
+    });
+  });
+};
+export { comparePassword, decode, encode, hashPassword };

package/dist/index.d.mts

@@ -1,4 +1,7 @@
 declare const encode: (obj: unknown) => string;
 declare const decode: (encoded: string) => any;
 
-export { decode, encode };
+declare const hashPassword: (plainPassword: string) => Promise<string>;
+declare const comparePassword: (plainPassword: string, storedHash: string) => Promise<boolean>;
+
+export { comparePassword, decode, encode, hashPassword };

package/dist/index.d.ts

@@ -1,4 +1,7 @@
 declare const encode: (obj: unknown) => string;
 declare const decode: (encoded: string) => any;
 
-export { decode, encode };
+declare const hashPassword: (plainPassword: string) => Promise<string>;
+declare const comparePassword: (plainPassword: string, storedHash: string) => Promise<boolean>;
+
+export { comparePassword, decode, encode, hashPassword };

package/dist/index.js

@@ -1,9 +1,11 @@
 /** Powered by @ttoss/config. https://ttoss.dev/docs/modules/packages/config/ */
 "use strict";
 
+var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __export = (target, all) => {
   for (var name in all) __defProp(target, name, {
@@ -20,6 +22,15 @@ var __copyProps = (to, from, except, desc) => {
   }
   return to;
 };
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+// If the importer is in node compatibility mode or this is not an ESM
+// file that has been converted to a CommonJS file using a Babel-
+// compatible transform (i.e. "__esModule" has not been set), then set
+// "default" to the CommonJS "module.exports" for node compatibility.
+isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
+  value: mod,
+  enumerable: true
+}) : target, mod));
 var __toCommonJS = mod => __copyProps(__defProp({}, "__esModule", {
   value: true
 }), mod);
@@ -27,8 +38,10 @@ var __toCommonJS = mod => __copyProps(__defProp({}, "__esModule", {
 // src/index.ts
 var src_exports = {};
 __export(src_exports, {
+  comparePassword: () => comparePassword,
   decode: () => decode,
-  encode: () => encode
+  encode: () => encode,
+  hashPassword: () => hashPassword
 });
 module.exports = __toCommonJS(src_exports);
 
@@ -39,8 +52,40 @@ var encode = obj => {
 var decode = encoded => {
   return JSON.parse(Buffer.from(encoded, "base64").toString("utf8"));
 };
+
+// src/hash.ts
+var import_node_crypto = __toESM(require("crypto"));
+var ITERATIONS = 1e3;
+var KEY_LENGTH = 64;
+var DIGEST = "sha256";
+var hashPassword = plainPassword => {
+  const salt = import_node_crypto.default.randomBytes(16).toString("hex");
+  return new Promise((resolve, reject) => {
+    import_node_crypto.default.pbkdf2(plainPassword, salt, ITERATIONS, KEY_LENGTH, DIGEST, (err, derivedKey) => {
+      if (err) {
+        reject(err);
+      }
+      const hash = derivedKey.toString("hex");
+      resolve(`${salt}:${hash}`);
+    });
+  });
+};
+var comparePassword = (plainPassword, storedHash) => {
+  const [salt, hash] = storedHash.split(":");
+  return new Promise((resolve, reject) => {
+    import_node_crypto.default.pbkdf2(plainPassword, salt, ITERATIONS, KEY_LENGTH, DIGEST, (err, derivedKey) => {
+      if (err) {
+        reject(err);
+      }
+      const hashToCompare = derivedKey.toString("hex");
+      resolve(hash === hashToCompare);
+    });
+  });
+};
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  comparePassword,
   decode,
-  encode
+  encode,
+  hashPassword
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ttoss/auth-core",
-  "version": "0.1.11",
+  "version": "0.2.0",
   "description": "Core authentication library for ttoss",
   "author": "ttoss",
   "contributors": [
@@ -34,7 +34,7 @@
   "devDependencies": {
     "jest": "^29.7.0",
     "tsup": "^8.3.0",
-    "@ttoss/config": "^1.33.0"
+    "@ttoss/config": "^1.34.0"
   },
   "keywords": [
     "auth",
@@ -48,6 +48,6 @@
   },
   "scripts": {
     "build": "tsup",
-    "test": "echo jest"
+    "test": "jest --projects tests/unit"
   }
 }

package/src/hash.ts

@@ -0,0 +1,50 @@
+import crypto from 'node:crypto';
+
+const ITERATIONS = 1000;
+
+const KEY_LENGTH = 64;
+
+const DIGEST = 'sha256';
+
+export const hashPassword = (plainPassword: string): Promise<string> => {
+  const salt = crypto.randomBytes(16).toString('hex');
+  return new Promise((resolve, reject) => {
+    crypto.pbkdf2(
+      plainPassword,
+      salt,
+      ITERATIONS,
+      KEY_LENGTH,
+      DIGEST,
+      (err, derivedKey) => {
+        if (err) {
+          reject(err);
+        }
+        const hash = derivedKey.toString('hex');
+        resolve(`${salt}:${hash}`);
+      }
+    );
+  });
+};
+
+export const comparePassword = (
+  plainPassword: string,
+  storedHash: string
+): Promise<boolean> => {
+  const [salt, hash] = storedHash.split(':');
+  return new Promise((resolve, reject) => {
+    crypto.pbkdf2(
+      plainPassword,
+      salt,
+      ITERATIONS,
+      KEY_LENGTH,
+      DIGEST,
+      (err, derivedKey) => {
+        if (err) {
+          reject(err);
+        }
+        const hashToCompare = derivedKey.toString('hex');
+        resolve(hash === hashToCompare);
+      }
+    );
+  });
+};

package/src/index.ts

@@ -1 +1,2 @@
 export { encode, decode } from './encodeDecode';
+export { hashPassword, comparePassword } from './hash';