1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
|
use argon2::Argon2;
use password_hash::{PasswordHash, PasswordHasher, PasswordVerifier, SaltString};
use rand_core::OsRng;
#[derive(Debug, sqlx::Type)]
#[sqlx(transparent)]
pub struct StoredHash(String);
impl StoredHash {
pub fn new(password: &str) -> Result<Self, password_hash::Error> {
let salt = SaltString::generate(&mut OsRng);
let argon2 = Argon2::default();
let hash = argon2
.hash_password(password.as_bytes(), &salt)?
.to_string();
Ok(Self(hash))
}
pub fn verify(&self, password: &str) -> Result<bool, password_hash::Error> {
let hash = PasswordHash::new(&self.0)?;
match Argon2::default().verify_password(password.as_bytes(), &hash) {
// Successful authentication, not an error
Ok(()) => Ok(true),
// Unsuccessful authentication, also not an error
Err(password_hash::errors::Error::Password) => Ok(false),
// Password validation failed for some other reason, treat as an error
Err(err) => Err(err),
}
}
}
|
