Skip to main content

hashEmailVerificationToken

API Docs

Function: hashEmailVerificationToken()

hashEmailVerificationToken(token): string

Defined in: src/utilities/emailVerificationTokenUtils.ts:46

Creates a HMAC-SHA-256 hash of an email verification token for secure storage.

Note: HMAC-SHA-256 is appropriate here (not argon2/bcrypt) because:

  • The token is cryptographically random (256 bits of entropy)
  • Brute-force attacks are computationally infeasible
  • This matches the pattern used for password reset tokens in this codebase

Parameters​

token​

string

The raw email verification token

Returns​

string

  • The hashed token