Express - Mongoose: Basic user table with password hash and checking methods.

user.js

//// Core modules
const crypto = require('crypto');
const util = require('util');

//// External modules
const mongoose = require('mongoose');

//// Modules
const randomBytesAsync = util.promisify(crypto.randomBytes);

const Schema = mongoose.Schema;

const schema = new Schema({
    username: {
        type: String,
        trim: true,
    },
    passwordHash: {
        type: String,
        trim: true,
    },
    salt: {
        type: String,
        trim: true,
    },
}, { timestamps: true })

//// Schema methods
schema.statics.randomStringAsync = async function (length = 32) {
    let salt = await randomBytesAsync(length);
    return salt.toString('hex');
}

schema.statics.hashPassword = function (password, salt) {
    return crypto.pbkdf2Sync(password, salt, 10000, 64, 'sha512').toString('hex');
};

//// Instance methods
schema.methods.generatePasswordAsync = async function () {
    let plainPass = await this.constructor.randomStringAsync()
    let salt = await this.constructor.randomStringAsync(16)
    this.passwordHash = this.constructor.hashPassword(plainPass, salt);
    this.salt = salt;
    return plainPass;
}

schema.methods.checkPassword = function (password) {
    return this.passwordHash === this.constructor.hashPassword(password, this.salt);
}

//// Middlewares


module.exports = schema