1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
|
package main
import (
"database/sql"
"fmt"
_ "github.com/mattn/go-sqlite3"
"golang.org/x/crypto/bcrypt"
)
const (
bcryptCost = 12
)
func Register(db *sql.DB, username, password string) error {
hash, err := bcrypt.GenerateFromPassword([]byte(password), bcryptCost)
if err != nil {
return err
}
err = Transaction(db, func(tx *sql.Tx) error {
_, err := tx.Exec(
`INSERT INTO users (username, password_bcrypt) VALUES(?, ?);`,
username,
hash,
)
return err
})
return err
}
func Authenticate(db *sql.DB, username, password string) error {
var hash []byte
err := Transaction(db, func(tx *sql.Tx) error {
row := tx.QueryRow(
`SELECT password_bcrypt from users WHERE username=?;`,
username,
)
return row.Scan(&hash)
})
if err != nil {
return fmt.Errorf("Failed to get password hash from database: %w", err)
}
return bcrypt.CompareHashAndPassword(hash, []byte(password))
}
|
