import * as jose from "jose";

export const HASH_ALGO = "SHA-256";

export const hashPassword = async (password: string) => {
    const iterations = 600000;
    const encoder = new TextEncoder();
    const bytes = encoder.encode(password);
    const salt = crypto.getRandomValues(new Uint8Array(16));
    const keyMaterial = await crypto.subtle.importKey(
        "raw",
        bytes,
        "PBKDF2",
        false,
        ["deriveBits"],
    );
    const hash = await crypto.subtle.deriveBits(
        {
            name: "PBKDF2",
            hash: HASH_ALGO,
            salt,
            iterations,
        },
        keyMaterial,
        256,
    );
    const hashB64 = jose.base64url.encode(new Uint8Array(hash));
    const saltB64 = jose.base64url.encode(salt);
    return {
        hash: hashB64,
        salt: saltB64,
        iterations,
    };
};

export const verifyPassword = async (
    password: string,
    hashB64: string,
    saltB64: string,
    iterations: number,
) => {
    const encoder = new TextEncoder();
    const passwordBytes = encoder.encode(password);
    const salt = jose.base64url.decode(saltB64);
    const params = {
        name: "PBKDF2",
        hash: HASH_ALGO,
        salt,
        iterations,
    };
    const keyMaterial = await crypto.subtle.importKey(
        "raw",
        passwordBytes,
        "PBKDF2",
        false,
        ["deriveBits"],
    );
    const hash = await crypto.subtle.deriveBits(params, keyMaterial, 256);
    const hashBase64 = jose.base64url.encode(new Uint8Array(hash));
    return hashBase64 === hashB64;
};