22 lines
760 B
JavaScript
22 lines
760 B
JavaScript
import crypto from 'crypto'
|
|
|
|
export function hashRecoveryToken(token) {
|
|
return crypto.createHash('sha256').update(String(token), 'utf8').digest('hex')
|
|
}
|
|
|
|
export function generateRecoveryToken() {
|
|
// URL-safe (hex)
|
|
return crypto.randomBytes(32).toString('hex')
|
|
}
|
|
|
|
export function pruneRecoveryTokens(user, maxTokens = 10) {
|
|
const list = Array.isArray(user.passkeyRecoveryTokens) ? user.passkeyRecoveryTokens : []
|
|
const now = Date.now()
|
|
const filtered = list.filter(t => t && t.tokenHash && t.expiresAt && new Date(t.expiresAt).getTime() > now)
|
|
// keep newest first
|
|
filtered.sort((a, b) => new Date(b.createdAt || 0) - new Date(a.createdAt || 0))
|
|
user.passkeyRecoveryTokens = filtered.slice(0, maxTokens)
|
|
return user.passkeyRecoveryTokens
|
|
}
|
|
|