summaryrefslogtreecommitdiff
path: root/password.go
blob: 9be347ad2983dbc413e773d3bfbce45f3c10b806 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
package main

import (
	"database/sql"
	"fmt"

	_ "github.com/mattn/go-sqlite3"
	"golang.org/x/crypto/bcrypt"
)

const (
	bcryptCost = 12
)

func Register(tx *sql.Tx, username, password string) error {
	hash, err := bcrypt.GenerateFromPassword([]byte(password), bcryptCost)
	if err != nil {
		return err
	}

	_, err = tx.Exec(
		`INSERT INTO users (username, password_bcrypt) VALUES(?, ?);`,
		username,
		hash,
	)

	return err
}

func Authenticate(tx *sql.Tx, username, password string) error {
	var hash []byte

	row := tx.QueryRow(
		`SELECT password_bcrypt from users WHERE username=?;`,
		username,
	)

	err := row.Scan(&hash)
	if err != nil {
		return fmt.Errorf("Failed to get password hash from database: %w", err)
	}

	return bcrypt.CompareHashAndPassword(hash, []byte(password))
}