From cca3817537f1e895db4598594520bfbc24a36cb7 Mon Sep 17 00:00:00 2001
From: jesopo
Date: Mon, 24 Feb 2020 11:43:55 +0000
Subject: move permissions module password hashing to utils/security.py

---
 src/utils/security.py | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

(limited to 'src/utils')

diff --git a/src/utils/security.py b/src/utils/security.py
index bb21a523..14f92aa0 100644
--- a/src/utils/security.py
+++ b/src/utils/security.py
@@ -1,4 +1,4 @@
-import base64, hmac, socket, ssl, typing
+import base64, binascii, hmac, os, socket, ssl, typing
 
 def ssl_context(cert: str=None, key: str=None, verify: bool=True
         ) -> ssl.SSLContext:
@@ -25,6 +25,17 @@ def ssl_wrap(sock: socket.socket, cert: str=None, key: str=None,
 def constant_time_compare(a: typing.AnyStr, b: typing.AnyStr) -> bool:
     return hmac.compare_digest(a, b)
 
+import scrypt
+def password(byte_n: int=32):
+    return binascii.hexlify(os.urandom(byte_n)).decode("utf8")
+def salt(byte_n: int=64) -> bytes:
+    return base64.b64encode(os.urandom(byte_n)).decode("utf8")
+def hash(given_salt: str, data: str):
+    return base64.b64encode(scrypt.hash(data, given_salt)).decode("utf8")
+def hash_verify(salt: str, data: str, compare: str):
+    given_hash = hash(salt, data)
+    return constant_time_compare(given_hash, compare)
+
 from cryptography.hazmat.backends import default_backend
 from cryptography.hazmat.primitives import serialization
 from cryptography.hazmat.primitives import hashes
-- 
cgit v1.3.1-10-gc9f91