phpass-to-argon2

Methods for checking passwords against phpass or argon2 hashes, and upgrading then to argon2 where needed.

import verify, { hash } from 'phpass-to-argon2';

/**
 * An example login function using phpass-to-argon2
 * @param user The user object to verify against
 * @param password The password submitted by the login form
 */
export default async function login(user, password) {
    return verify(
        // Supply the password and the hash to verify against
        user.passwordHash,
        password,

        // Supply a function for updating the hash when needed
        async newHash => {
            user.passwordHash = newHash;
            await user.save();
        }
    )
}

// We also export the argon2 hash method
// for setting the password normally.
export async function updatePassword(user, newPassword) {
    user.passwordHash = await hash(newPassword);
    await user.save();
}

Modules

phpass-to-argon2

verify

Verify a password against a phpass or argon2 hash. If the update argument is passed, it will be called when a password hash needs updating from phpass to argon2

hash ⇒ string

Hash a password using argon2

needsUpdate ⇒ boolean

Check if a hash needs to be updated

phpass-to-argon2

verify

Verify a password against a phpass or argon2 hash. If the update argument is passed, it will be called when a password hash needs updating from phpass to argon2

Param	Type	Description
hash	string	The hash to compare with
password	string	The password to compare
[update]	function	A function to execute when the stored hash needs updating, taking the new hash as the first argument
[options]	object	The argon2 options object

hash ⇒ string

Hash a password using argon2

Returns: string - The hashed password

Param	Type	Description
password	string	The password to be hashed
options	object	The argon2 options object

needsUpdate ⇒ boolean

Check if a hash needs to be updated

Param	Type	Description
hash	string	The hash to check