1 files changed, 44 insertions, 0 deletions
diff --git a/server/password-hash.js b/server/password-hash.js
new file mode 100644
index 0000000..83a23d9
--- /dev/null
+++ b/server/password-hash.js
@@ -0,0 +1,44 @@
+const passwordHashOld = require("password-hash");
+const bcrypt = require("bcryptjs");
+const saltRounds = 10;
+
+/**
+ * Hash a password
+ * @param {string} password Password to hash
+ * @returns {string} Hash
+ */
+exports.generate = function (password) {
+    return bcrypt.hashSync(password, saltRounds);
+};
+
+/**
+ * Verify a password against a hash
+ * @param {string} password Password to verify
+ * @param {string} hash Hash to verify against
+ * @returns {boolean} Does the password match the hash?
+ */
+exports.verify = function (password, hash) {
+    if (isSHA1(hash)) {
+        return passwordHashOld.verify(password, hash);
+    }
+
+    return bcrypt.compareSync(password, hash);
+};
+
+/**
+ * Is the hash a SHA1 hash
+ * @param {string} hash Hash to check
+ * @returns {boolean} Is SHA1 hash?
+ */
+function isSHA1(hash) {
+    return (typeof hash === "string" && hash.startsWith("sha1"));
+}
+
+/**
+ * Does the hash need to be rehashed?
+ * @param {string} hash Hash to check
+ * @returns {boolean} Needs to be rehashed?
+ */
+exports.needRehash = function (hash) {
+    return isSHA1(hash);
+};