rxbn_/auth.rxbn.de
1
0
Fork 0
Code Releases Activity

auth - pre-defined hash delimiter in config

Browse Source
This commit is contained in:
Ruben Meyer 2020-08-14 13:23:05 +02:00
parent cd8cedf592
commit fd9e52bd65
Signed by: rxbn_
GPG Key ID: BE3BF898BE352FE2
2 changed files with 11 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
bin/auth/module.js
View File

@ -8,8 +8,11 @@
var methods = {}; var methods = {};
var crypto = require('crypto'); var crypto = require('crypto');
var cfg = require(global['__dirname']+'/bin/config');
delimiter = cfg.app.passhashDelimiter;
/** /**
* Generating Hash * returns a hash|salt combination
* @author Ruben Meyer * @author Ruben Meyer
* @param {String} key "user password" * @param {String} key "user password"
* @param {String} salt (OPTIONAL) * @param {String} salt (OPTIONAL)
@ -27,11 +30,11 @@ methods.generateHash = (key, salt) => {
hash.update(key); hash.update(key);
hash = hash.digest('hex'); hash = hash.digest('hex');
return hash+'|'+salt; return hash+delimiter+salt;
}; };
/** /**
* validate hashed password * validates a hashed input
* @author Ruben Meyer * @author Ruben Meyer
* @param {String} hash "hashed password" * @param {String} hash "hashed password"
* @param {String} key "plaintext password" * @param {String} key "plaintext password"
@ -40,15 +43,15 @@ methods.generateHash = (key, salt) => {
methods.validateHash = (hash, key) => { methods.validateHash = (hash, key) => {
if(typeof hash !== 'string' || typeof key !== 'string') return false; if(typeof hash !== 'string' || typeof key !== 'string') return false;
let salt = hash.split('|')[1]; let salt = hash.split(delimiter)[1];
let generated = methods.generateHash(key, salt); let generated = methods.generateHash(key, salt);
if( if(
hash.split('|')[0].length === generated.split('|')[0].length hash.split(delimiter)[0].length === generated.split(delimiter)[0].length
&& &&
crypto.timingSafeEqual( crypto.timingSafeEqual(
Buffer.from(generated.split('|')[0], 'hex'), Buffer.from(generated.split(delimiter)[0], 'hex'),
Buffer.from(hash.split('|')[0], 'hex') Buffer.from(hash.split(delimiter)[0], 'hex')
) )
) { ) {
return true; return true;

1
bin/config.js
View File

@ -27,6 +27,7 @@ module.exports = {
}, },
app: { app: {
locale: 'de-DE', // default locale (de-DE & en-EN should be available) locale: 'de-DE', // default locale (de-DE & en-EN should be available)
passhashDelimiter: '|'
}, },
mongoose: { mongoose: {
uri: process.env.DB_URL, uri: process.env.DB_URL,