gitea/opengist
0
0
Fork 0
mirror of https://github.com/thomiceli/opengist.git synced 2025-05-14 00:02:10 +02:00
Code Issues Packages Projects Releases Wiki Activity

Better password hashes error handling (#132)

Browse Source
This commit is contained in:
Thomas Miceli 2023-10-13 05:36:00 +02:00 committed by GitHub
parent 7059d5c834
commit b1acea9f1c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
internal/web/util.go
View File

@ -265,8 +265,16 @@ func (a Argon2ID) hash(plain string) (string, error) {
}
func (a Argon2ID) verify(plain, hash string) (bool, error) {
if hash == "" {
return false, nil
}
hashParts := strings.Split(hash, "$")
if len(hashParts) != 6 {
return false, errors.New("invalid hash")
}
_, err := fmt.Sscanf(hashParts[3], "m=%d,t=%d,p=%d", &a.memory, &a.time, &a.threads)
if err != nil {
return false, err