argon2-cloudflare

Cloudflare worker for hashing and verifying passwords with argon2. Can be used via a service binding.

Dev

Requires Node.js 22 or newer and Rust with the wasm32-unknown-unknown target (rustup target add wasm32-unknown-unknown).

Install deps

npm install

Dev server

npm run dev

Test

With the dev server running, run npm test in another terminal.

Deploy to cloudflare

npm run deploy

Api

Hash

Endpoint

POST /hash

Request

{
    "password": "foo"
}

or with options:

{
    "password": "some-password",
    "options": {
        "timeCost": 2,
        "memoryCost": 19456,
        "parallelism": 1
    }
}

Response

{
    "hash": "$argon2id$v=19$m=19456,t=2,p=1$2FtyxY2Dz8nfis44QbdqUA$+HDTT2BgERMyXEEX/o2LbKdROHzQeL4VWbyM7U0p8Ag"
}

Verify

Endpoint

POST /verify

Request

{
    "password": "foo",
    "hash": "$argon2id$v=19$m=19456,t=2,p=1$2FtyxY2Dz8nfis44QbdqUA$+HDTT2BgERMyXEEX/o2LbKdROHzQeL4VWbyM7U0p8Ag"
}

Response

{
    "matches": true,
}

Service binding from pages function

interface Env {
  ARGON2: Fetcher;
}

export const onRequestPost: PagesFunction<Env> = async (context) => {
  const resp = await context.env.ARGON2.fetch("http://internal/hash", {
    method: "POST",
    body: JSON.stringify({ password: "foo" }),
  });

  const { hash } = await resp.json();
  console.log(hash);
}