Missed the encryption for the user model

Author: Tsvetoslav Lazarov

package.json

@@ -22,6 +22,7 @@
     "@angular/router": "3.2.3",
     "body-parser": "^1.15.2",
     "core-js": "^2.4.1",
+    "crypto": "0.0.3",
     "express": "^4.14.0",
     "express-session": "^1.14.2",
     "mongoose": "^4.7.4",

server/models/user-model.js

@@ -1,5 +1,6 @@
 const mongoose = require("mongoose");
 const mongooseSchema = mongoose.Schema;
+const encryption = require("../utils/encryption");
 
 const userSchema = mongooseSchema({
     username: { type: String, required: true, unique: true },

server/utils/encryption.js

@@ -0,0 +1,16 @@
+const crypto = require("crypto");
+
+function generateSalt() {
+    return crypto.randomBytes(128).toString("base64");
+}
+
+function generateHashedPassword(salt, password) {
+    return crypto.createHmac("sha256", salt)
+        .update(password)
+        .digest("hex");
+}
+
+module.exports = {
+    generateSalt,
+    generateHashedPassword
+};