Function assertCorrectUserPassword

apps/app-server/src/utils/users.ts:176–211

(input: {
  userId: string;
  loginHash: Uint8Array;
})

}

export async function assertCorrectUserPassword(input: {
  userId: string;
  loginHash: Uint8Array;
}) {
  const user = await UserModel.query()
    .findById(input.userId)
    .select('encrypted_rehashed_login_hash');

  if (user?.encrypted_rehashed_login_hash == null) {
    throw new TRPCError({
      message: 'User not found.',
      code: 'NOT_FOUND',
    });
  }

  const passwordHashValues = getPasswordHashValues(
    decryptUserRehashedLoginHash(user.encrypted_rehashed_login_hash),
  );

  const passwordValues = derivePasswordValues({
    password: input.loginHash,
    salt: passwordHashValues.saltBytes,
  });

  const passwordIsCorrect = sodium.memcmp(
    passwordValues.hash,
    passwordHashValues.hashBytes,
  );

  if (!passwordIsCorrect) {
    throw new TRPCError({
      message: 'Password is incorrect.',
      code: 'BAD_REQUEST',
    });
  }
}

export async function assertUserSubscribed(input: { userId: string }) {
  if ((await dataAbstraction().hget('user', input.userId, 'plan')) !== 'pro') {