auth/password_argon2.ts

Argon2id password hashing implementation.

Uses @node-rs/argon2 for native performance with OWASP-recommended parameters. Includes timing attack resistance via verify_dummy.

Declarations
#

4 declarations

PasswordHashDeps import {argon2_password_deps} from '@fuzdev/fuz_app/auth/password_argon2.js';

Argon2id implementation of PasswordHashDeps.

Pass as password in AppDeps / CreateAppBackendOptions for production use.

(password: string): Promise<string> import {hash_password} from '@fuzdev/fuz_app/auth/password_argon2.js';

Hash a password using Argon2id.

the plaintext password to hash

type string

Promise<string>

the Argon2id hash string

(password: string): Promise<boolean> import {verify_dummy} from '@fuzdev/fuz_app/auth/password_argon2.js';

Verify a password against a dummy hash for timing attack resistance.

Always returns false, but takes the same time as a real verification. Call when account lookup fails to prevent timing-based user enumeration.

the plaintext password to "verify"

type string

Promise<boolean>

always false

(password: string, password_hash: string): Promise<boolean> import {verify_password} from '@fuzdev/fuz_app/auth/password_argon2.js';

Verify a password against an Argon2id hash.

the plaintext password to verify

type string

the Argon2id hash to verify against

type string

Promise<boolean>

true if the password matches