89 lines
2.2 KiB
Rust
89 lines
2.2 KiB
Rust
|
//! Password hashing tests
|
||
|
|
|
||
|
|
pub use password_hash::{
|
||
|
|
Decimal, Error, Ident, Output, ParamsString, PasswordHash, PasswordHasher, Result, Salt,
|
||
|
|
};
|
||
|
|
|
||
|
|
const ALG: Ident = Ident::new_unwrap("example");
|
||
|
|
|
||
|
|
/// Stub password hashing function for testing.
|
||
|
|
pub struct StubPasswordHasher;
|
||
|
|
|
||
|
|
impl PasswordHasher for StubPasswordHasher {
|
||
|
|
type Params = StubParams;
|
||
|
|
|
||
|
|
fn hash_password_customized<'a>(
|
||
|
|
&self,
|
||
|
|
password: &[u8],
|
||
|
|
algorithm: Option<Ident<'a>>,
|
||
|
|
version: Option<Decimal>,
|
||
|
|
params: StubParams,
|
||
|
|
salt: impl Into<Salt<'a>>,
|
||
|
|
) -> Result<PasswordHash<'a>> {
|
||
|
|
let salt = salt.into();
|
||
|
|
let mut output = Vec::new();
|
||
|
|
|
||
|
|
if let Some(alg) = algorithm {
|
||
|
|
if alg != ALG {
|
||
|
|
return Err(Error::Algorithm);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
for slice in &[b"pw", password, b",salt:", salt.as_str().as_bytes()] {
|
||
|
|
output.extend_from_slice(slice);
|
||
|
|
}
|
||
|
|
|
||
|
|
let hash = Output::new(&output)?;
|
||
|
|
|
||
|
|
Ok(PasswordHash {
|
||
|
|
algorithm: ALG,
|
||
|
|
version,
|
||
|
|
params: params.try_into()?,
|
||
|
|
salt: Some(salt),
|
||
|
|
hash: Some(hash),
|
||
|
|
})
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
/// Stub parameters
|
||
|
|
#[derive(Clone, Debug, Default)]
|
||
|
|
pub struct StubParams;
|
||
|
|
|
||
|
|
impl<'a> TryFrom<&PasswordHash<'a>> for StubParams {
|
||
|
|
type Error = Error;
|
||
|
|
|
||
|
|
fn try_from(_: &PasswordHash<'a>) -> Result<Self> {
|
||
|
|
Ok(Self)
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
impl<'a> TryFrom<StubParams> for ParamsString {
|
||
|
|
type Error = Error;
|
||
|
|
|
||
|
|
fn try_from(_: StubParams) -> Result<Self> {
|
||
|
|
Ok(Self::default())
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
#[test]
|
||
|
|
fn verify_password_hash() {
|
||
|
|
let valid_password = "test password";
|
||
|
|
let salt = Salt::from_b64("test-salt").unwrap();
|
||
|
|
let hash = PasswordHash::generate(StubPasswordHasher, valid_password, salt).unwrap();
|
||
|
|
|
||
|
|
// Sanity tests for StubFunction impl above
|
||
|
|
assert_eq!(hash.algorithm, ALG);
|
||
|
|
assert_eq!(hash.salt.unwrap(), salt);
|
||
|
|
|
||
|
|
// Tests for generic password verification logic
|
||
|
|
assert_eq!(
|
||
|
|
hash.verify_password(&[&StubPasswordHasher], valid_password),
|
||
|
|
Ok(())
|
||
|
|
);
|
||
|
|
|
||
|
|
assert_eq!(
|
||
|
|
hash.verify_password(&[&StubPasswordHasher], "wrong password"),
|
||
|
|
Err(Error::Password)
|
||
|
|
);
|
||
|
|
}
|