Class Argon2PasswordHasher

Maintained Argon2id implementation using OWASP's 19 MiB/2 iteration baseline.

Implements

PasswordHasher

Index

Constructors

Methods

Constructors

constructor

new Argon2PasswordHasher(): Argon2PasswordHasher

Returns Argon2PasswordHasher

Methods

hash

hash(password: string): Promise<string>
Hash a password with the maintained Argon2id parameters.
Parameters
- password: string
  Plaintext password; validated by validatePassword first.
Returns Promise<string>
The encoded Argon2id hash produced by the argon2 library.

Throws
PasswordPolicyError When the password length is outside the policy bounds.
Implementation of PasswordHasher.hash
- Defined in backend/src/application/password-service.ts:61

verify

verify(hash: string, password: string): Promise<boolean>
Verify a password against an encoded Argon2id hash.
Parameters
- hash: string
  Encoded hash previously produced by this hasher.
- password: string
  Candidate plaintext password.
Returns Promise<boolean>
true when the candidate matches; false for a mismatch without revealing which part of the credential was wrong.
Implementation of PasswordHasher.verify
- Defined in backend/src/application/password-service.ts:79