This wraps the Rust crate argon2 in a very simple WASI (or commandline) compatible program.
Compatible with workerd / CloudFlare Workers' WASI support. You need to run the worker in unbounded mode for it to not time out.
bcrypt-wasi provides an identical API for bcrypt.
Simple example:
import { WASI } from "@cloudflare/workers-wasi";
import argon2 from './argon2-wasi.wasm';
export async function invoke(args: string[]) {
const stdout = new TransformStream();
const stderr = new TransformStream();
const wasi = new WASI({
args: ["argon2-wasi.wasm", ...args],
stdout: stdout.writable,
stderr: stderr.writable,
});
const instance = new WebAssembly.Instance(argon2, {
wasi_snapshot_preview1: wasi.wasiImport,
});
await wasi.start(instance);
const errors = await stderr.readable.getReader().read();
const errorsValue = new TextDecoder().decode(errors.value);
if (errorsValue) {
console.error('[invoke] stderr: ', errorsValue);
throw new Error(errorsValue);
}
const ret = await stdout.readable.getReader().read();
const retValue = new TextDecoder().decode(ret.value);
return retValue.trim();
}
export async function argon2Hash(password: string): Promise<string> {
return await invoke(["hash", password]);
}
export async function argon2Verify(password: string, hash: string): Promise<boolean> {
return await invoke(["verify", password, hash]) === "true";
}Then just use await argon2Hash('somepwd'); or await argon2Verify('somepwd', '$argon2id$v..')
Same license as for the argon2 crate; licensed under either of:
at your option.