credentialpassword.h

/*
 * Copyright (C) 2013-2017 Daniel Nicoletti <dantti12@gmail.com>
 *
 * This library is free software; you can redistribute it and/or
 * modify it under the terms of the GNU Lesser General Public
 * License as published by the Free Software Foundation; either
 * version 2.1 of the License, or (at your option) any later version.
 *
 * This library is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public
 * License along with this library; if not, write to the Free Software
 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301  USA
 */
#ifndef CUTELYSTPLUGIN_CREDENTIALPASSWORD_H
#define CUTELYSTPLUGIN_CREDENTIALPASSWORD_H
 
#include <QtCore/QCryptographicHash>
 
#include <Cutelyst/cutelyst_global.h>
#include <Cutelyst/Plugins/Authentication/authentication.h>
 
namespace Cutelyst {
 
class CredentialPasswordPrivate;
class CUTELYST_PLUGIN_AUTHENTICATION_EXPORT CredentialPassword : public AuthenticationCredential
{
    Q_OBJECT
    Q_DECLARE_PRIVATE(CredentialPassword)
public:
    enum PasswordType {
        None,
        Clear,
        Hashed
    };
    Q_ENUM(PasswordType)
 
    
    explicit CredentialPassword(QObject *parent = nullptr);
    virtual ~CredentialPassword() override;
 
    AuthenticationUser authenticate(Context *c, AuthenticationRealm *realm, const ParamsMultiMap &authinfo) final;
 
    QString passwordField() const;
 
    void setPasswordField(const QString &fieldName);
 
    PasswordType passwordType() const;
 
    void setPasswordType(PasswordType type);
 
    QString passwordPreSalt() const;
 
    void setPasswordPreSalt(const QString &passwordPreSalt);
 
    QString passwordPostSalt() const;
 
    void setPasswordPostSalt(const QString &passwordPostSalt);
 
    static bool validatePassword(const QByteArray &password, const QByteArray &correctHash);
 
    static bool validatePassword(const QString &password, const QString &correctHash);
 
    static QByteArray createPassword(const QByteArray &password, QCryptographicHash::Algorithm method, int iterations, int saltByteSize, int hashByteSize);
 
    static QByteArray createPassword(const QByteArray &password);
 
    inline static QString createPassword(const QString &password);
 
    static QByteArray pbkdf2(QCryptographicHash::Algorithm method,
                             const QByteArray &password, const QByteArray &salt,
                             int rounds, int keyLength);
 
    static QByteArray hmac(QCryptographicHash::Algorithm method, const QByteArray &key, const QByteArray &message);
 
protected:
    CredentialPasswordPrivate *d_ptr;
};
 
inline bool CredentialPassword::validatePassword(const QString &password, const QString &correctHash)
{
    return validatePassword(password.toUtf8(), correctHash.toLatin1());
}
 
QString CredentialPassword::createPassword(const QString &password)
{
    return QString::fromLatin1(createPassword(password.toUtf8()));
}
 
} // namespace Plugin
 
#endif // CUTELYSTPLUGIN_CREDENTIALPASSWORD_H