Your Name
38 lines
1.2 KiB
Python
38 lines
1.2 KiB
Python
from __future__ import annotations
|
|
|
|
import base64
|
|
import hashlib
|
|
import secrets
|
|
|
|
|
|
def hash_password(password: str, iterations: int = 390_000) -> str:
|
|
salt = secrets.token_bytes(16)
|
|
digest = hashlib.pbkdf2_hmac("sha256", password.encode("utf-8"), salt, iterations)
|
|
return "pbkdf2_sha256${}${}${}".format(
|
|
iterations,
|
|
base64.urlsafe_b64encode(salt).decode("ascii"),
|
|
base64.urlsafe_b64encode(digest).decode("ascii"),
|
|
)
|
|
|
|
|
|
def verify_password(password: str, encoded: str) -> bool:
|
|
try:
|
|
algo, iterations_raw, salt_raw, digest_raw = encoded.split("$", 3)
|
|
if algo != "pbkdf2_sha256":
|
|
return False
|
|
iterations = int(iterations_raw)
|
|
salt = base64.urlsafe_b64decode(salt_raw.encode("ascii"))
|
|
expected = base64.urlsafe_b64decode(digest_raw.encode("ascii"))
|
|
except Exception:
|
|
return False
|
|
actual = hashlib.pbkdf2_hmac("sha256", password.encode("utf-8"), salt, iterations)
|
|
return secrets.compare_digest(actual, expected)
|
|
|
|
|
|
def token_hash(token: str, secret: str) -> str:
|
|
return hashlib.sha256((secret + ":" + token).encode("utf-8")).hexdigest()
|
|
|
|
|
|
def new_token() -> str:
|
|
return secrets.token_urlsafe(32)
|