Refactoring to Hash Stored User Emails

packages/server/controllers/auth.js

@@ -5,6 +5,7 @@ const token = require("../utils/token");
 const bcrypt = require("bcrypt");
 const client = new OAuth2Client(process.env.WEB_CLIENT_ID);
 const nodemailer = require("nodemailer");
+const UserController = require("../../controllers/users");
 
 const NAMESPACE = "7af17462-8078-4703-adda-be2143a4d93a";
 
@@ -13,6 +14,7 @@ async function create(accessToken, refreshToken, profile, callback) {
     let { sub, given_name, family_name, picture, email } = profile._json;
     picture = picture.replace("=s96-c", "");
     const googleUUID = uuidv5(sub, NAMESPACE);
+    const emailHash = await UserController.hashUserEmail(email);
     const user = await prisma.user.findUniqueOrThrow({
       where: {
         userId: googleUUID,
@@ -22,7 +24,7 @@ async function create(accessToken, refreshToken, profile, callback) {
       const newUser = await prisma.user.create({
         data: {
           userId: googleUUID,
-          email: email,
+          email: emailHash,
           avatar: picture,
           firstName: given_name,
           lastName: family_name,
@@ -82,14 +84,15 @@ async function register(newUser) {
   const salt = await bcrypt.genSalt(saltRounds);
   const passwordHash = await bcrypt.hash(newUser.password, salt);
   const userId = uuidv4();
+  const emailHash = await UserController.hashUserEmail(newUser.email);
 
   // placeholder names until new user puts in their names in onboarding screen
   return await prisma.user.create({
     data: {
       userId,
       firstName: "New",
       lastName: "User",
-      email: newUser.email,
+      email: emailHash,
       password: passwordHash,
     },
   });
@@ -191,9 +194,10 @@ async function authenticate(request, response, next) {
 }
 
 async function isUserEmail(email) {
+  const emailHash = await UserController.hashUserEmail(email);
   const result = await prisma.user.findUnique({
     where: {
-      email: email,
+      email: emailHash,
     },
   });
 

packages/server/controllers/users.js

@@ -1,4 +1,5 @@
 const prisma = require("../prisma/prisma");
+const crypto = require("node:crypto");
 
 async function getAllUsers() {
   const query = await prisma.user.findMany();
@@ -24,18 +25,20 @@ async function getUserEmail(userId) {
 }
 
 async function getUserByEmail(email) {
+  const emailHash = hashUserEmail(email);
   const query = await prisma.user.findUnique({
     where: {
-      email: email,
+      email: emailHash,
     },
   });
   return query;
 }
 
 async function getUserIdByEmail(email) {
+  const emailHash = hashUserEmail(email);
   const query = await prisma.user.findUnique({
     where: {
-      email: email,
+      email: emailHash,
     },
   });
   return query.userId;
@@ -62,11 +65,19 @@ async function getGuildsForUser(userId) {
   return guilds;
 }
 
+async function hashUserEmail(email) {
+  const hash = crypto.createHash("sha256");
+  hash.update(email);
+  const emailHash = hash.digest("hex");
+  return emailHash;
+}
+
 module.exports = {
   getUser,
   getAllUsers,
   getUserByEmail,
   getGuildsForUser,
   getUserIdByEmail,
   getUserEmail,
+  hashUserEmail,
 };