d71683a7e2
* Removes promise wrapping in AccountLockoutPolicy * Use bcrypt promises as globally available
28 lines
680 B
JavaScript
28 lines
680 B
JavaScript
// Tools for encrypting and decrypting passwords.
|
|
// Basically promise-friendly wrappers for bcrypt.
|
|
var bcrypt = require('bcryptjs');
|
|
|
|
try {
|
|
bcrypt = require('bcrypt');
|
|
} catch(e) { /* */ }
|
|
|
|
// Returns a promise for a hashed password string.
|
|
function hash(password) {
|
|
return bcrypt.hash(password, 10);
|
|
}
|
|
|
|
// Returns a promise for whether this password compares to equal this
|
|
// hashed password.
|
|
function compare(password, hashedPassword) {
|
|
// Cannot bcrypt compare when one is undefined
|
|
if (!password || !hashedPassword) {
|
|
return Promise.resolve(false);
|
|
}
|
|
return bcrypt.compare(password, hashedPassword);
|
|
}
|
|
|
|
module.exports = {
|
|
hash: hash,
|
|
compare: compare
|
|
};
|