Utilities

Token and password helpers are available separately from the session manager.

Token utilities

import { createToken, hashToken } from 'session-tether/utils';

createToken(): string

Generates 32 cryptographically random bytes using Node's randomBytes() and returns a base64url string.

hashToken(value: string): string

Returns a SHA-256 hex digest. Use it for opaque-token storage, not password hashing. Core session methods already hash raw credentials where needed.

import { hashPassword, verifyPassword } from 'session-tether/utils/password';
// Also available from 'session-tether/utils'.

hashPassword(password: string): Promise<string>

Uses a random 16-byte salt and Node's scrypt to derive a 64-byte key. Returns salt:key, with each part hex encoded.

verifyPassword(password: string, stored: string): Promise<boolean>

Accepts hashes produced by hashPassword(). Malformed encodings return false. Valid encodings are checked using scrypt and timingSafeEqual().

const stored = await hashPassword('a user-provided password');
const matches = await verifyPassword('a user-provided password', stored);

These helpers do not create accounts, enforce password policy, or manage resets. Those flows are application responsibilities.