couch-pwd
Hash and compare passwords with the crypto's pbkdf2. Heavily inspired by node-pwd.
Uses the following values as defaults
- iterations = 10
- keylen = 20
- size = 16
- encoding = 'hex'
The resulting salt and password Strings are the same you'd get when you save a user to CouchDB and let CouchDB do all the hashing for you.
Module has two goals
- verify user passwords without making requests to
/_session
API - use the same hashing algorithm for other databases
Installation
npm install couch-pwd
Example
On signup generate a salt / password hash, and save it somewhere:
var pwd = ;pwdhash'my password' { usersalt = salt; userhash = hash;}
To authenticate load and compare:
var pwd = ;pwdhash'submitted password' usersalt { if userhash == hash // yay }
License
MIT