Merge pull request #152 from Luancarlos/encrypt_password_user

Encrypt user passwords on db

Author: Angelo Manganiello

generators/server/templates/server/package.json.ejs

@@ -65,7 +65,8 @@
     "shelljs": "0.8.3",
     "sqlite3": "4.0.9",
     "swagger-ui-express": "4.0.7",
-    "typeorm": "0.2.24"
+    "typeorm": "0.2.24",
+    "typeorm-encrypted": "0.5.5"
   },
   "devDependencies": {
     "@nestjs/testing": "6.5.3",

generators/server/templates/server/src/config.ts.ejs

@@ -51,6 +51,8 @@ export class Config {
   'cloud.config.name' = '<%= baseName %>';
   'cloud.config.profile' = 'prod';
   'loud.config.label' = 'master';
+  'crypto.key' = '3772c1cdbd27c225735d116d1e4c5421a3aec26c919cc7ab457f21a4d16a1821';
+  'crypto.iv' = '54f3ad979d9262d3a2dd4489531daf34';
 
   constructor(properties) {
     this.addAll(properties);

generators/server/templates/server/src/domain/user.entity.ts.ejs

@@ -2,6 +2,8 @@ import { Authority } from './authority.entity';
 import { Entity, Column, ManyToMany, JoinTable } from 'typeorm';
 import { BaseEntity } from './base/base.entity';
 import { ApiModelProperty } from '@nestjs/swagger';
+import { config } from '../config';
+import { EncryptionTransformer } from "typeorm-encrypted";
 
 @Entity('jhi_user')
 export class User extends BaseEntity {
@@ -32,7 +34,15 @@ export class User extends BaseEntity {
   authorities?: any[];
 
   @ApiModelProperty({ example: 'myuser', description: 'User password' })
-  @Column()
+  @Column({
+    type: "varchar",
+    transformer: new EncryptionTransformer({
+      key: config.get('crypto.key'),
+      algorithm: 'aes-256-cbc',
+      ivLength: 16,
+      iv: config.get('crypto.iv')
+    })
+  })
   password: string;
   @Column({ nullable: true })
   imageUrl?: string;