59 lines
1.5 KiB
Go
59 lines
1.5 KiB
Go
package scsusers
|
|
|
|
import (
|
|
"fmt"
|
|
"log"
|
|
"strconv"
|
|
"time"
|
|
|
|
"golang.org/x/crypto/bcrypt"
|
|
)
|
|
|
|
func Login(username, password string) bool {
|
|
u, ok := Get(username)
|
|
if !ok {
|
|
return false
|
|
}
|
|
if bcrypt.CompareHashAndPassword([]byte(u.Password), []byte(password)) != nil {
|
|
rc, ok := u.Get("recoverycode")
|
|
if !ok || bcrypt.CompareHashAndPassword([]byte(u.Password), []byte(rc)) != nil {
|
|
log.Printf("scsusers.Login: Failed password for " + username)
|
|
return false
|
|
}
|
|
tmp, ok := u.Get("recoverytime")
|
|
if !ok {
|
|
log.Printf("scsusers.Login: recoverytime missing " + username)
|
|
return false
|
|
}
|
|
rt, _ := strconv.ParseInt(tmp, 10, 64)
|
|
if time.Now().Unix() > rt {
|
|
log.Printf("scsusers.Login: recovery time expired")
|
|
return false
|
|
}
|
|
u.Delete("recoverykey")
|
|
u.Delete("recoverytime")
|
|
}
|
|
log.Printf("User %s logged in\n", username)
|
|
return true
|
|
}
|
|
|
|
func (u *UserData) ChangePassword(oldpass, newpass string) bool {
|
|
if bcrypt.CompareHashAndPassword([]byte(u.Password), []byte(oldpass)) != nil {
|
|
log.Printf("scsusers.ChangePassword: Failed password for %s\n", u.Username)
|
|
return false
|
|
}
|
|
newcrypt, err := bcrypt.GenerateFromPassword([]byte(newpass), 10)
|
|
if err != nil {
|
|
log.Printf("scsusers.ChangePassword: generate: %s", err.Error())
|
|
return false
|
|
}
|
|
q := fmt.Sprintf("update %s_auth set password=? where userid=?", c.TablePrefix)
|
|
_, err = c.db.Exec(q, newcrypt, u.UserID)
|
|
if err != nil {
|
|
log.Printf("scsusers.ChangePassword: update failed for %s: %s\n", u.Username, err.Error())
|
|
return false
|
|
}
|
|
return true
|
|
|
|
}
|