LLaraNode
Auth Package

Password Hashing

Securely hash and verify passwords using bcrypt.

Password Hashing

Securely hash and verify passwords using bcrypt.

Hashing Passwords

import { hashPassword } from "@lara-node/auth";

const hashed = await hashPassword("my-secret-password");

Verifying Passwords

import { comparePassword } from "@lara-node/auth";

const isValid = await comparePassword("my-secret-password", hashed);
// true or false

Usage in Registration

@Route.post('/register')
async register(req: Request) {
  const { name, email, password } = req.body

  const user = await User.create({
    name,
    email,
    password: await hashPassword(password),
  })

  return user.toJSON()
}

Usage in Login

@Route.post('/login')
async login(req: Request) {
  const { email, password } = req.body

  const user = await User.where('email', email).first()

  if (!user) {
    return { error: 'User not found' }
  }

  const isValid = await comparePassword(password, user.password)

  if (!isValid) {
    return { error: 'Invalid password' }
  }

  const token = generateToken({ userId: user.id }, 86400)
  return { token }
}

Using with Observers

Hash passwords automatically using a model observer:

@Observe(User)
class UserObserver extends Observer {
  async creating(user: User) {
    user.password = await hashPassword(user.password);
  }

  async updating(user: User) {
    if (user.isDirty("password")) {
      user.password = await hashPassword(user.password);
    }
  }
}

Next Steps

Auth Middleware

Protect routes with JWT authentication middleware.

Token Generation

Generate and verify JWT tokens for authentication.