tokenGenerator.js

var crypto = require("crypto");

module.exports = (function(){
  var DELIMITER = ":";
  function signToken(token) {
    return crypto
      .createHmac("sha1", "ZvACQyRwbh5zXTD8ta0W")
      .update(token)
      .digest("hex");
  }

  function generateToken(user) {
    var token = signToken(user.email + user.lastLogin + user.salt);
    return token;
  }

  function checkToken(user, token) {
    var expected = signToken(user.email + user.lastLogin + user.salt);
    return token === expected;
  }

  return {
    generateToken: generateToken,
    checkToken: checkToken
  }
}());