mirror of
https://github.com/snowykami/neo-blog.git
synced 2025-09-26 19:16:24 +00:00
Snowykami
b0b32c93d1
- Introduced environment variables for database and email configurations. - Implemented email verification code generation and validation. - Added password reset feature with email verification. - Updated user registration and profile management APIs. - Refactored user security settings to include email and password updates. - Enhanced console layout with internationalization support. - Removed deprecated settings page and integrated global settings. - Added new reset password page and form components. - Updated localization files for new features and translations.
43 lines
1.1 KiB
Go
43 lines
1.1 KiB
Go
package utils
|
|
|
|
import (
|
|
"crypto/sha256"
|
|
"encoding/hex"
|
|
|
|
"golang.org/x/crypto/bcrypt"
|
|
)
|
|
|
|
type PasswordUtils struct {
|
|
}
|
|
|
|
var Password = PasswordUtils{}
|
|
|
|
// HashPassword 密码哈希函数
|
|
func (u *PasswordUtils) HashPassword(password string, salt string) (string, error) {
|
|
saltedPassword := Password.addSalt(password, salt)
|
|
hashedPassword, err := bcrypt.GenerateFromPassword([]byte(saltedPassword), bcrypt.DefaultCost)
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
return string(hashedPassword), nil
|
|
}
|
|
|
|
// VerifyPassword 验证密码
|
|
func (u *PasswordUtils) VerifyPassword(password, hashedPassword string, salt string) bool {
|
|
if len(hashedPassword) == 0 || len(salt) == 0 {
|
|
// 防止oidc空密码出问题
|
|
return false
|
|
}
|
|
saltedPassword := Password.addSalt(password, salt)
|
|
err := bcrypt.CompareHashAndPassword([]byte(hashedPassword), []byte(saltedPassword))
|
|
return err == nil
|
|
}
|
|
|
|
// addSalt 加盐函数
|
|
func (u *PasswordUtils) addSalt(password string, salt string) string {
|
|
combined := password + salt
|
|
hash := sha256.New()
|
|
hash.Write([]byte(combined))
|
|
return hex.EncodeToString(hash.Sum(nil))
|
|
}
|