shockrah/bubble
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Salting and hashing admin creds upon creation

Browse Source
This commit is contained in:
shockrah 2025-03-11 16:51:06 -07:00
parent 503ba812f2
commit 1c9d0a6207
1 changed files with 6 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
admin-cli/src/main.rs
View File

@ -5,7 +5,7 @@ use clap::Parser;
use postgres::{Client, NoTls}; use postgres::{Client, NoTls};
use base64::{engine::general_purpose::URL_SAFE_NO_PAD, Engine as _}; use base64::{engine::general_purpose::URL_SAFE_NO_PAD, Engine as _};
use serde::Serialize; use serde::Serialize;
use argon2::{Argon2, PasswordHasher, password_hash::Salt, PasswordHash}; use argon2::{Argon2, PasswordHasher, password_hash::Salt};
const PASSWORD_LENGTH: usize = 64; const PASSWORD_LENGTH: usize = 64;
@ -44,8 +44,9 @@ fn random_string(size: usize) -> String {
} }
fn salt_and_hash(password: &str) -> String { fn salt_and_hash(password: &str) -> String {
let salt = random_string(8); // Generates a salted and hashed variation of the given password
let salt: Salt = salt.as_str().try_into().unwrap(); let salt_str = random_string(8);
let salt: Salt = salt_str.as_str().try_into().unwrap();
let a2 = Argon2::default(); let a2 = Argon2::default();
let hash = a2.hash_password(password.as_bytes(), salt).unwrap(); let hash = a2.hash_password(password.as_bytes(), salt).unwrap();
hash.to_string() hash.to_string()
@ -91,9 +92,10 @@ fn full_setup(args: Args) -> Result<Config, postgres::Error> {
client.batch_execute(&setup_tables_script)?; client.batch_execute(&setup_tables_script)?;
// Populate the user table with the first user ( owner ) // Populate the user table with the first user ( owner )
let salted = salt_and_hash(&bubble_admin.password);
client.execute( client.execute(
"INSERT INTO users (id, username, password) VALUES (gen_random_uuid(), $1, $2)", "INSERT INTO users (id, username, password) VALUES (gen_random_uuid(), $1, $2)",
&[&bubble_admin.username, &bubble_admin.password] &[&bubble_admin.username, &salted]
)?; )?;
Ok(Config { Ok(Config {
postgres: postgres_admin, postgres: postgres_admin,