Update to work with Node v10

[grimurd]

Module doesn't compile correctly for Node v10.

[grimurd]

pinging @jheusala

[grimurd]

For anyone with the same problem, the module shacrypt can be used as an alternative if you're using SHA256 or SHA512 (and works with node v10).

Another alternative is unixcrypt which is made using Typescript and doesn't depend on native modules. I tested it and it works but it hasn't been battle tested or vetted by any cryptographers as far as I know so I'm reluctant to trust it.

Here's how you can hash and validate password with shacrypt so that it works with passwords made with node-crypt3.

const shacrypt = require('shacrypt');
const crypto = require('crypto');

// Hashes a password with a random 64 byte salt.
function hash(password) {
    const salt = '$6$' + crypto.randomBytes(64).toString('base64');

    return shacrypt.sha512crypt(password, salt);
}

// Validates that entered password is equal to saved password.
function validate(enteredPassword, savedPassword) {
    return savedPassword === shacrypt.sha512crypt(enteredPassword, savedPassword);
}

let password = hash('mypassword');

console.log({
    valid: validate('mypassword', password)
})

[sweber83]

@grimurd
The incompatibility with node v10 arises from the dependency 'nan'.
This problem can be circumvented by reinstalling 'crypt3', which will install a version of 'nan', that is compatible with node v10.
The reason it works this way is, that the version of the 'nan' dep is defined as a caret range ('^2.1.0'), so the newest 2.x.x version is installed.

[PaulSearcy]

@grimurd @sweber83

Going further down the rabbit hole here.

While node 10.x does work node 12.x + does not.

This is due to nan: ^2.1.0 using a deprecated function in V8 (JS engine Node.js uses)
v8::String::Utf8Value::Utf8Value(v8::Local<v8::Value>)

It could be node 11 that uses a version of V8 that drops support for that function completely, but I've only tested on 10.19.0 and 12.13.0.

Thanks @grimurd for suggesting shacrypt! Really, didn't want to fork this repository to manually update nan dependency.

[idangozlan]

So for those who still fighting to get a working version for 8+, I created a new module forked out of this one, with newer dependencies:

npm i --save @idango/crypt3
https://www.npmjs.com/package/@idango/crypt3

[thejhh]

I have actually fixed this issue AFAIK weeks ago, but I could not get Travis CI migration working and cannot run tests -- so that's why no release yet.