Added user passwords

server/models/User.js

@@ -1,4 +1,5 @@
 import crypto from 'crypto';
+import bcrypt from 'bcrypt';
 import {
   DataTypes,
   sequelize,
@@ -7,11 +8,15 @@ import {
 
 import JWT from 'jsonwebtoken';
 
+const BCRYPT_COST = process.env.NODE_ENV !== 'production' ? 4 : 12;
+
 const User = sequelize.define('user', {
   id: { type: DataTypes.UUID, defaultValue: DataTypes.UUIDV4, primaryKey: true },
   email: { type: DataTypes.STRING, unique: true },
   username: { type: DataTypes.STRING, unique: true },
   name: DataTypes.STRING,
+  password: DataTypes.VIRTUAL,
+  passwordDigest: DataTypes.STRING,
   isAdmin: DataTypes.BOOLEAN,
   slackAccessToken: encryptedFields.vault('slackAccessToken'),
   slackId: { type: DataTypes.STRING, allowNull: true },
@@ -25,6 +30,23 @@ const User = sequelize.define('user', {
     async getTeam() {
       return this.team;
     },
+    verifyPassword(password) {
+      return new Promise((resolve, reject) => {
+        if (!this.passwordDigest) {
+          resolve(false);
+          return;
+        }
+
+        bcrypt.compare(password, this.passwordDigest, (err, ok) => {
+          if (err) {
+            reject(err);
+            return;
+          }
+
+          resolve(ok);
+        });
+      });
+    },
   },
   indexes: [
     {
@@ -36,7 +58,25 @@ const User = sequelize.define('user', {
 const setRandomJwtSecret = (model) => {
   model.jwtSecret = crypto.randomBytes(64).toString('hex');
 };
+const hashPassword = function hashPassword(model) {
+  if (!model.password) {
+    return null;
+  }
 
+  return new Promise((resolve, reject) => {
+    bcrypt.hash(model.password, BCRYPT_COST, (err, digest) => {
+      if (err) {
+        reject(err);
+        return;
+      }
+
+      model.passwordDigest = digest;
+      resolve();
+    });
+  });
+};
+User.beforeCreate(hashPassword);
+User.beforeUpdate(hashPassword);
 User.beforeCreate(setRandomJwtSecret);
 
 export default User;

server/models/User.test.js

@@ -0,0 +1,22 @@
+import { User } from '.';
+
+import { flushdb, sequelize } from '../test/support';
+
+beforeEach(flushdb);
+afterAll(() => sequelize.close());
+
+it('should set JWT secret and password digest', async () => {
+  const user = User.build({
+    username: 'user',
+    name: 'User',
+    email: 'user1@example.com',
+    password: 'test123!',
+  });
+  await user.save();
+
+  expect(user.passwordDigest).toBeTruthy();
+  expect(user.getJwtToken()).toBeTruthy();
+
+  expect(await user.verifyPassword('test123!')).toBe(true);
+  expect(await user.verifyPassword('badPasswd')).toBe(false);
+});