package.json

{
  "name": "profile",
  "version": "0.0.1",
  "description": "",
  "main": "index.js",
  "scripts": {
    "test": "echo \"Error: no test specified\" && exit 1"
  },
  "author": "",
  "license": "MIT",
  "dependencies": {
    "express": "^4.16.2"
  }
}

profile-ab.sh

#!/usr/bin/env bash

curl -X GET "http://localhost:5000/newUser?username=matt&password=password"

ab -k -c 20 -n 250 "http://localhost:5000/auth?username=matt&password=password"

profile-server.sh

#!/usr/bin/env bash

BASEDIR=$(dirname "$0")
cd ${BASEDIR}/../

NODE_ENV=production node --prof profile/server.js

server.js

'use strict';

const crypto = require('crypto');

const express = require('express');
const app = express();

let users = [];

app.get('/newUser', (req, res) => {
  let username = req.query.username || '';
  const password = req.query.password || '';

  username = username.replace(/[!@#$%^&*]/g, '');

  if (!username || !password || users.username) {
    return res.sendStatus(400);
  }

  const salt = crypto.randomBytes(128).toString('base64');
  const hash = crypto.pbkdf2Sync(password, salt, 10000, 512, 'sha512');

  users[username] = { salt, hash };

  res.sendStatus(200);
});

app.get('/auth', (req, res) => {
  let username = req.query.username || '';
  const password = req.query.password || '';

  username = username.replace(/[!@#$%^&*]/g, '');

  if (!username || !password || !users[username]) {
    return res.sendStatus(400);
  }

  const hash = crypto.pbkdf2Sync(password, users[username].salt, 10000, 512, 'sha512');

  if (users[username].hash.toString() === hash.toString()) {
    res.sendStatus(200);
  } else {
    res.sendStatus(401);
  }
});

app.listen(5000);
console.log('Server started, listening on port 5000 ...');