mirror of
https://github.com/Rain-kl/OpenFlare.git
synced 2026-09-28 05:46:36 +08:00
ryan
6b75706b8e
Result: {"status":"keep","total_issues":8,"golint_canonicalheader":0,"golint_errname":0,"golint_errorlint":1,"golint_forcetypeassert":0,"golint_gosec":0,"golint_intrange":0,"golint_modernize":3,"golint_nilnil":3,"golint_perfsprint":0,"golint_prealloc":0,"golint_recvcheck":1,"golint_usestdlibvars":0,"golint_wastedassign":0,"golint_total":8,"eslint_problems":0,"eslint_errors":0,"eslint_warnings":0,"tsc_errors":0,"measure_s":99,"golint_test_testifylint":0,"golint_test_thelper":0,"golint_test_usetesting":0,"golint_test_total":0,"golint_exhaustive":0,"golint_vetx_total":0,"vitest_failed":0,"vitest_total":126}
49 lines
1.2 KiB
Go
49 lines
1.2 KiB
Go
// Copyright 2026 Arctel.net
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
package util
|
|
|
|
import (
|
|
"sync"
|
|
|
|
"golang.org/x/crypto/bcrypt"
|
|
)
|
|
|
|
// HashPassword 使用 bcrypt 对密码进行哈希处理
|
|
func HashPassword(password string) (string, error) {
|
|
hash, err := bcrypt.GenerateFromPassword([]byte(password), bcrypt.DefaultCost)
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
return string(hash), nil
|
|
}
|
|
|
|
var dummyPasswordHashOnce sync.Once
|
|
var dummyPasswordHash string
|
|
|
|
func dummyHash() string {
|
|
dummyPasswordHashOnce.Do(func() {
|
|
hash, err := bcrypt.GenerateFromPassword([]byte("x"), bcrypt.DefaultCost)
|
|
if err != nil {
|
|
return
|
|
}
|
|
dummyPasswordHash = string(hash)
|
|
})
|
|
return dummyPasswordHash
|
|
}
|
|
|
|
// CheckPasswordHash 比较 bcrypt 哈希值与明文密码是否匹配
|
|
func CheckPasswordHash(hash, password string) bool {
|
|
return bcrypt.CompareHashAndPassword([]byte(hash), []byte(password)) == nil
|
|
}
|
|
|
|
// DummyCheckPassword runs a bcrypt compare against a dummy hash so missing-user
|
|
// login failures take a similar amount of time as a real password miss.
|
|
func DummyCheckPassword(password string) {
|
|
hash := dummyHash()
|
|
if hash == "" {
|
|
return
|
|
}
|
|
_ = CheckPasswordHash(hash, password)
|
|
}
|