Example of save and check hash password in sequlizer.js using crypto new nodejs library

README.md

Bcrypt Is no longer part of node, so I included example with new module of crypto

I am sharing this code from one of working project.

This code is based on express framwork. I seprated config file, model file and controller file, you can use controller file in express route module for test

auth.controller.js

const { USERS } = require('./model');
module.exports = class authController {
    static register(req, res) {
        USERS.create({
            MOBILE_NO: req.body.mobile,
            PASSWORD: req.body.password,
            SALT:""
        }).then(function (data) {
            res.json(data.toJSON());
        }).catch((err) => {
            res.json({
                error: err.errors[0].message
            })
        })
    }
    static login(req, res) {
        var message = [];
        var success = false;
        var status = 404;
        USERS.findOne({
           where:{
            MOBILE_NO: req.body.mobile
           }
        }).then(function (user) {
            if (user) {
                message.push("user found");
                if(user.validPassword(req.body.password)) {
                    status=200;
                    success = true
                    message.push("You are authorised");
                }else{
                    message.push("Check Credentials");
                }
            }else{
                message.push("Check Credentials");
            }
           
            res.json({status,success,message});
        });
    }
}

db.config.js

require('dotenv').config();
const { Sequelize,DataTypes ,Model} = require("sequelize");
module.exports.Model = Model;
module.exports.DataTypes = DataTypes;
module.exports.sequelize  = new Sequelize(process.env.DB_NAME, process.env.DB_USER_NAME, process.env.DB_PASSWORD, {
    host: process.env.DB_HOST,
    dialect: process.env.DB_DISELECT,
    pool: {
      max: 1,
      min: 0,
      idle: 10000
    },
    //logging: true
});

models.js

const { sequelize, DataTypes, Model } = require('./db.config');
var crypto = require('crypto');
class USERS extends Model {
   validPassword(password) {
    var hash = crypto.pbkdf2Sync(password,
      this.SALT, 1000, 64, `sha512`).toString(`hex`);
      console.log(hash == this.PASSWORD)
    return this.PASSWORD === hash;
  }
}

USERS.init(
  {
    ID: {
      autoIncrement: true,
      type: DataTypes.BIGINT,
      allowNull: false,
      primaryKey: true
    },
    MOBILE_NO: {
      type: DataTypes.BIGINT,
      allowNull: false,
      unique: true
    },
    PASSWORD: {
      type: DataTypes.STRING(200),
      allowNull: false
    },
    SALT: {
      type: DataTypes.STRING(200),
      allowNull: false
    }
  },

  {
    sequelize,
    tableName: 'USERS',
    timestamps: true,
    hooks:{
      beforeCreate:(user)=> {
        console.log(user);
        user.SALT = crypto.randomBytes(16).toString('hex');
        user.PASSWORD = crypto.pbkdf2Sync(user.PASSWORD, user.SALT,
          1000, 64, `sha512`).toString(`hex`);
        console.log(this.PASSWORD, this.SALT);
      },
    }
  });


module.exports.USERS = USERS;