WorkSimplon/brief-08-back
WorkSimplon/brief-08-back
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects 1 Releases Wiki Activity

feat(credentials): refactor hashing, verification, and token signing methods

Browse Source 
This commit reimplements the hashing, verification, and token signing methods in the CredentialsService. It also adjusts the constructor's parameters, reorders imports, and introduces additional logging for debugging purposes. Finally, it corrects minor formatting and style issues in the credentials.service.ts and credentials.module.ts files.
This commit is contained in:
Mathis H (Avnyr) 2024-07-11 13:51:13 +02:00
parent de3d1cca05
commit 6905e8faee
Signed by: Mathis
GPG Key ID: DD9E0666A747D126
2 changed files with 34 additions and 29 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/credentials/credentials.module.ts
View File

@ -1,10 +1,10 @@
import { Module } from "@nestjs/common";
import { CredentialsService } from "./credentials.service";
import { ConfigModule } from "@nestjs/config";
import { CredentialsService } from "./credentials.service";
@Module({
imports: [ConfigModule],
providers: [CredentialsService],
exports: [CredentialsService]
exports: [CredentialsService],
})
export class CredentialsModule {}

57
src/credentials/credentials.service.ts
View File

@ -1,44 +1,49 @@
import { BadRequestException, Injectable } from "@nestjs/common";
import * as argon from "argon2";
import * as jose from "jose"
// biome-ignore lint/style/useImportType: used by Next.js
import { ConfigService } from "@nestjs/config";
import * as argon from "argon2";
import * as jose from "jose";
import { generateSecret, JWTPayload } from "jose";
@Injectable()
export class CredentialsService {
constructor(private configService: ConfigService) {
}
constructor(
private readonly configService: ConfigService,
) {}
async hash(plaintextPassword: string) {
if (plaintextPassword.length < 6) throw new BadRequestException("Password is not strong enough !")
return argon.hash(Buffer.from(plaintextPassword), {
secret: this.configService.get("APP_HASH_SECRET"),
})
console.log(plaintextPassword);
if (plaintextPassword.length < 6)
throw new BadRequestException("Password is not strong enough !");
return argon.hash(plaintextPassword, {
secret: Buffer.from(this.configService.get("APP_HASH_SECRET")),
});
}
async check(plaintextPassword: string, hashedPassword: string) {
return argon.verify(hashedPassword, Buffer.from(plaintextPassword), {
secret: this.configService.get("APP_HASH_SECRET"),
})
return argon.verify(hashedPassword, plaintextPassword, {
secret: Buffer.from(this.configService.get("APP_HASH_SECRET")),
});
}
async verifyAuthToken(token: string) {
const verifyRes = await jose.jwtVerify(token, Uint8Array.from(this.configService.get("APP_TOKEN_SECRET")), {
subject: "auth",
audience: "user",
issuer: "ShouldStick"
})
return await jose.jwtVerify(
token,
Uint8Array.from(this.configService.get("APP_TOKEN_SECRET")),
{
audience: "auth:user",
issuer: "ShouldStick",
},
);
}
async signAuthToken() {
return new jose.SignJWT({})
.setProtectedHeader({ alg: 'dir', enc: 'A128CBC-HS256' })
async signAuthToken(payload: JWTPayload) {
console.log(this.configService.get("APP_TOKEN_SECRET"))
const token = new jose.SignJWT(payload)
.setProtectedHeader({ alg: "HS512", enc: "A128CBC-HS512" })
.setIssuedAt()
.setExpirationTime('3 day')
.setExpirationTime("3 day")
.setIssuer("ShouldStick")
.setAudience("user")
.setSubject("auth")
.sign(Uint8Array.from(this.configService.get("APP_TOKEN_SECRET")))
.setAudience("auth:user")
console.log(token)
return await token.sign(Uint8Array.from(this.configService.get("APP_TOKEN_SECRET")));
}
}