homeio

1import "server-only";
2
3import { randomBytes, scrypt as scryptCallback, timingSafeEqual } from "node:crypto";
4import { promisify } from "node:util";
5
6const scrypt = promisify(scryptCallback);
7const SCRYPT_KEY_LENGTH = 64;
8
9export async function hashPassword(plainPassword: string) {
10  const salt = randomBytes(16).toString("hex");
11  const derived = (await scrypt(
12    plainPassword,
13    salt,
14    SCRYPT_KEY_LENGTH,
15  )) as Buffer;
16
17  return `${salt}:${derived.toString("hex")}`;
18}
19
20export async function verifyPassword(
21  plainPassword: string,
22  storedPasswordHash: string,
23) {
24  const [salt, hashHex] = storedPasswordHash.split(":");
25
26  if (!salt || !hashHex) return false;
27
28  const derived = (await scrypt(
29    plainPassword,
30    salt,
31    SCRYPT_KEY_LENGTH,
32  )) as Buffer;
33  const hash = Buffer.from(hashHex, "hex");
34
35  if (hash.length !== derived.length) return false;
36
37  return timingSafeEqual(hash, derived);
38}
39