mirror of https://github.com/wg-easy/wg-easy
Browse Source
* separate route for onboarding * zse zod for validation * use argon2id * add build toolspull/1648/head
Bernd Storath
11 months ago
committed by
Bernd Storath
Bernd Storath
17 changed files with 104 additions and 126 deletions
@ -0,0 +1,8 @@ |
|||||
|
export default defineEventHandler(async (event) => { |
||||
|
const { username, password } = await readValidatedBody( |
||||
|
event, |
||||
|
validateZod(passwordType) |
||||
|
); |
||||
|
await Database.createUser(username, password); |
||||
|
return { success: true }; |
||||
|
}); |
||||
@ -1,24 +0,0 @@ |
|||||
import { DatabaseError } from '~~/services/database/repositories/database'; |
|
||||
|
|
||||
export default defineEventHandler(async (event) => { |
|
||||
setHeader(event, 'Content-Type', 'application/json'); |
|
||||
try { |
|
||||
const { username, password } = await readValidatedBody( |
|
||||
event, |
|
||||
validateZod(passwordType) |
|
||||
); |
|
||||
await Database.newUserWithPassword(username, password); |
|
||||
return { success: true }; |
|
||||
} catch (error) { |
|
||||
if (error instanceof DatabaseError) { |
|
||||
const t = await useTranslation(event); |
|
||||
throw createError({ |
|
||||
statusCode: 400, |
|
||||
statusMessage: t(error.message), |
|
||||
message: error.message, |
|
||||
}); |
|
||||
} else { |
|
||||
throw createError('Something happened !'); |
|
||||
} |
|
||||
} |
|
||||
}); |
|
||||
@ -0,0 +1,15 @@ |
|||||
|
export default defineEventHandler(async (event) => { |
||||
|
const { username, password } = await readValidatedBody( |
||||
|
event, |
||||
|
validateZod(passwordType) |
||||
|
); |
||||
|
const users = await Database.getUsers(); |
||||
|
if (users.length !== 0) { |
||||
|
throw createError({ |
||||
|
statusCode: 400, |
||||
|
statusMessage: 'Invalid state', |
||||
|
}); |
||||
|
} |
||||
|
await Database.createUser(username, password); |
||||
|
return { success: true }; |
||||
|
}); |
||||
@ -1,47 +1,18 @@ |
|||||
import bcrypt from 'bcryptjs'; |
import argon2 from 'argon2'; |
||||
|
|
||||
/** |
/** |
||||
* Checks if `password` matches the user password. |
* Checks if `password` matches the hash. |
||||
* |
|
||||
* @param {string} password string to test |
|
||||
* @returns {boolean} `true` if matching user password, otherwise `false` |
|
||||
*/ |
*/ |
||||
export function isPasswordValid(password: string, hash: string): boolean { |
export function isPasswordValid( |
||||
return bcrypt.compareSync(password, hash); |
password: string, |
||||
} |
hash: string |
||||
|
): Promise<boolean> { |
||||
/** |
return argon2.verify(hash, password); |
||||
* Checks if a password is strong based on following criteria : |
|
||||
* |
|
||||
* - minimum length of 12 characters |
|
||||
* - contains at least one uppercase letter |
|
||||
* - contains at least one lowercase letter |
|
||||
* - contains at least one number |
|
||||
* - contains at least one special character (e.g., !@#$%^&*(),.?":{}|<>). |
|
||||
* |
|
||||
* @param {string} password - The password to validate |
|
||||
* @returns {boolean} `true` if the password is strong, otherwise `false` |
|
||||
*/ |
|
||||
|
|
||||
export function isPasswordStrong(password: string): boolean { |
|
||||
if (password.length < 12) { |
|
||||
return false; |
|
||||
} |
|
||||
|
|
||||
const hasUpperCase = /[A-Z]/.test(password); |
|
||||
const hasLowerCase = /[a-z]/.test(password); |
|
||||
const hasNumber = /\d/.test(password); |
|
||||
const hasSpecialChar = /[!@#$%^&*(),.?":{}|<>]/.test(password); |
|
||||
|
|
||||
return hasUpperCase && hasLowerCase && hasNumber && hasSpecialChar; |
|
||||
} |
} |
||||
|
|
||||
/** |
/** |
||||
* Hashes a password. |
* Hashes a password. |
||||
* |
|
||||
* @param {string} password - The plaintext password to hash |
|
||||
* @returns {string} The hash of the password |
|
||||
*/ |
*/ |
||||
export function hashPassword(password: string): string { |
export async function hashPassword(password: string): Promise<string> { |
||||
return bcrypt.hashSync(password, 12); |
return argon2.hash(password); |
||||
} |
} |
||||
|
|||||
Loading…
Reference in new issue