0
owncast/utils/hashing.go
mahmed2000 a7e5f20337
Implement admin password hashing with bcrypt (#3754)
* Add bcrypt hashing helpers

* SetAdminPassword now hashes the password before saving it

* BasicAuth now compares the bcrypt hash for the password

* Modify migration2 to avoid a double password hash when upgrading

* Add migration for bcrypt hashed password

* Do not show admin password hash as initial value

* Update api tests to compare the bcrypt hash of the admin password instead

* Remove old admin password api tests

---------

Co-authored-by: Gabe Kangas <gabek@real-ity.com>
2024-06-26 21:20:22 -07:00

16 lines
376 B
Go

package utils
import (
"golang.org/x/crypto/bcrypt"
)
func HashPassword(password string) (string, error) {
// 0 will use the default cost of 10 instead
hash, err := bcrypt.GenerateFromPassword([]byte(password), 0)
return string(hash), err
}
func ComparseHash(hash string, password string) error {
return bcrypt.CompareHashAndPassword([]byte(hash), []byte(password))
}