first draft of signup

backend/lib/services/user.js

@@ -1,5 +1,5 @@
 'use strict'
-
+require('dotenv').config()
 const Util = require('util')
 const Jwt = require('@hapi/jwt')
 const Schmervice = require('@hapipal/schmervice')
@@ -62,15 +62,55 @@ module.exports = class UserService extends Schmervice.Service {
             'user_email',
             userInfo.user_email,
         )
-
         if (matchingEmails.length > 0) {
             throw `User ${userInfo.user_email} already exists: Cannot create a user without a unique email`
         }
-        const user = await User.query(txn).insert(userInfo)
-        user.user_id = user.id
-        delete user.id
+        
+        // Library: Secure-Password
+        const pepper = process.env.PEPPER
+        // add pepper to pw
+        const steak = password.trim() + pepper
+        console.log(steak)
+
+        const { Auth } = this.server.models()
+        // send peppered pw to (argon algorithm) library for salted hash
+        pwd.hash(steak, function (err, hash) {
+            if (err) throw err
+
+            // Save hash somewhere
+            pwd.verify(steak, hash, function (err, result) {
+                if (err) throw err
+                
+                switch (result) {
+                case securePassword.INVALID_UNRECOGNIZED_HASH:
+                    return console.error('This hash was not made with secure-password. Attempt legacy algorithm')
+                case securePassword.INVALID:
+                    return console.log('Invalid password')
+                case securePassword.VALID:
+                    return console.log('Authenticated')
+                case securePassword.VALID_NEEDS_REHASH:
+                    console.log('Yay you made it, wait for us to improve your safety')
+
+                    pwd.hash(userPassword, function (err, improvedHash) {
+                    if (err) console.error('You are authenticated, but we could not improve your safety this time around')
+
+                    // Save improvedHash somewhere
+                    // insert hash and salt into authentication table (with user, see 73)
+                    const saveHash = Auth.insert({ user_email: matchingEmails})
+                        .into('token')
+         
+                    return saveHash
+                    })
+                    break
+                }
+            })
+            })
+        
+        // const user = await User.query(txn).insert(userInfo)
+        // user.user_id = user.id
+        // delete user.id
         // await this.changePassword(id, password, txn)
-        return user
+        // return user
     }
 
     /**
@@ -157,6 +197,7 @@ module.exports = class UserService extends Schmervice.Service {
     async changePassword(id, password, txn) {
         const { User } = this.server.models()
         return 'done'
+        // rework with Auth model
 
         // await User.query(txn)
         //     .throwIfNotFound()