trabajo-afectivo/lib/password_hash.rb

60 lines
1.2 KiB
Ruby
Raw Normal View History

# Copyright (C) 2012-2016 Zammad Foundation, http://zammad-foundation.org/
module PasswordHash
include ApplicationLib
2018-04-12 14:57:37 +00:00
extend self # rubocop:disable Style/ModuleFunction
def crypt(password)
argon2.create(password)
end
def verified?(pw_hash, password)
Argon2::Password.verify_password(password, pw_hash, secret)
rescue
false
end
def crypted?(pw_hash)
return false if !pw_hash
return true if hashed_argon2?(pw_hash)
return true if hashed_sha2?(pw_hash)
false
end
def legacy?(pw_hash, password)
return false if pw_hash.blank?
return false if !password
sha2?(pw_hash, password)
end
def hashed_sha2?(pw_hash)
pw_hash.start_with?('{sha2}')
end
def hashed_argon2?(pw_hash)
# taken from: https://github.com/technion/ruby-argon2/blob/7e1f4a2634316e370ab84150e4f5fd91d9263713/lib/argon2.rb#L33
pw_hash =~ /^\$argon2i\$.{,112}/
end
def sha2(password)
crypted = Digest::SHA2.hexdigest(password)
"{sha2}#{crypted}"
end
private
def sha2?(pw_hash, password)
return false if !hashed_sha2?(pw_hash)
pw_hash == sha2(password)
end
def argon2
@argon2 ||= Argon2::Password.new(secret: secret)
end
def secret
@secret ||= Setting.get('application_secret')
end
end