X-Git-Url: https://git.r.bdr.sh/rbdr/mobius/blobdiff_plain/187d6dc500784760654b740a278fef59072ca5a8..dd81e2cf8030aaea778677270d2a1b6ed218d6b8:/hotline/account.go diff --git a/hotline/account.go b/hotline/account.go index a680861..b041f3c 100644 --- a/hotline/account.go +++ b/hotline/account.go @@ -3,6 +3,7 @@ package hotline import ( "encoding/binary" "golang.org/x/crypto/bcrypt" + "log" ) const GuestAccount = "guest" // default account used when no login is provided for a connection @@ -17,13 +18,13 @@ type Account struct { // Read implements io.Reader interface for Account func (a *Account) Read(p []byte) (n int, err error) { fields := []Field{ - NewField(fieldUserName, []byte(a.Name)), - NewField(fieldUserLogin, negateString([]byte(a.Login))), - NewField(fieldUserAccess, a.Access[:]), + NewField(FieldUserName, []byte(a.Name)), + NewField(FieldUserLogin, encodeString([]byte(a.Login))), + NewField(FieldUserAccess, a.Access[:]), } if bcrypt.CompareHashAndPassword([]byte(a.Password), []byte("")) != nil { - fields = append(fields, NewField(fieldUserPassword, []byte("x"))) + fields = append(fields, NewField(FieldUserPassword, []byte("x"))) } fieldCount := make([]byte, 2) @@ -37,3 +38,13 @@ func (a *Account) Read(p []byte) (n int, err error) { return len(p), nil } + +// hashAndSalt generates a password hash from a users obfuscated plaintext password +func hashAndSalt(pwd []byte) string { + hash, err := bcrypt.GenerateFromPassword(pwd, bcrypt.MinCost) + if err != nil { + log.Println(err) + } + + return string(hash) +}