crypt recovery

recovery.go

@@ -4,6 +4,8 @@ import (
 	"fmt"
 	"log"
 	"time"
+
+	"golang.org/x/crypto/bcrypt"
 )
 
 
@@ -12,12 +14,17 @@ func RecoverByEmail(email string) {
 	if !ok {
 		return
 	}
-	log.Printf("%#v", u)
 	recoverycode := generatePassword(16)
 	u.Delete("recoverycode")
 	u.Delete("recoverytime")
 
-	u.Set("recoverycode", string(recoverycode))
+	crypt, err := bcrypt.GenerateFromPassword(recoverycode, 10)
+	if err != nil {
+		log.Println("pass generation failed")
+		return
+	}
+
+	u.Set("recoverycode", string(crypt))
 	u.Set("recoverytime", fmt.Sprintf("%d", time.Now().Add(time.Minute*60).Unix()))
 
 	SendRecoveryEmail(email, email, string(recoverycode))