Function hashPassword

packages/database/crypto.ts:134–162

(password: string)

const PASSWORD_HASH = "SHA-256";

export async function hashPassword(password: string): Promise<string> {
	if (!password) {
		throw new Error("Cannot hash empty or null password");
	}

	const salt = crypto.getRandomValues(new Uint8Array(SALT_LENGTH));
	const keyMaterial = await crypto.subtle.importKey(
		"raw",
		new TextEncoder().encode(password),
		"PBKDF2",
		false,
		["deriveBits"],
	);

	const derived = await crypto.subtle.deriveBits(
		{
			name: "PBKDF2",
			salt,
			iterations: PASSWORD_ITERATIONS,
			hash: PASSWORD_HASH,
		},
		keyMaterial,
		PASSWORD_KEY_LENGTH * 8,
	);

	const result = Buffer.concat([Buffer.from(salt), Buffer.from(derived)]);

	return result.toString("base64");
}

export async function verifyPassword(
	stored: string,