Function verifyPassword

packages/common/server/crypto.ts:38–60

(
  password: string,
  hash: string,
  keyLength = 32,
)

 * @returns {boolean}
 */
export async function verifyPassword(
  password: string,
  hash: string,
  keyLength = 32,
): Promise<boolean> {
  return new Promise((resolve, reject) => {
    const [salt, hashKey] = hash.split('.');
    // we need to pass buffer values to timingSafeEqual
    const hashKeyBuff = Buffer.from(hashKey!, 'hex');
    scrypt(password, salt!, keyLength, (err, derivedKey) => {
      if (err) {
        reject(err);
      }
      // compare the new supplied password with the hashed password using timeSafeEqual
      resolve(
        timingSafeEqual(
          new Uint8Array(hashKeyBuff),
          new Uint8Array(derivedKey),
        ),
      );
    });
  });
}

export function createHash(data: string, len: number) {
  return cryptoCreateHash('shake256', { outputLength: len })