feat(server): Implement blake3 password hashing

bb-hackathon · May 22, 2024 · 15bec45 · 15bec45
1 parent 561fec5
commit 15bec45
Show file tree

Hide file tree

Showing 3 changed files with 42 additions and 2 deletions.
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/server/Cargo.toml b/server/Cargo.toml
@@ -12,6 +12,7 @@ path = "src/main.rs"
 path = "src/lib.rs"
 
 [dependencies]
+blake3 = "1.5.1"
 color-eyre = "0.6.3"
 diesel = { version = "2.1.6", features = ["postgres", "uuid", "r2d2"] }
 futures = "0.3.30"

diff --git a/server/src/services/registry.rs b/server/src/services/registry.rs
@@ -41,7 +41,7 @@ impl proto::registry_server::Registry for Registry {
         use diesel::query_dsl::methods::{FilterDsl, SelectDsl};
         use diesel::{ExpressionMethods, OptionalExtension, RunQueryDsl, SelectableHelper};
 
-        let credentials = request.into_inner();
+        let mut credentials = request.into_inner();
         let duplicate_user = users
             .filter(username.eq(&credentials.username))
             .select(User::as_select())
@@ -52,6 +52,9 @@ impl proto::registry_server::Registry for Registry {
         match duplicate_user {
             // No duplicate usernames found, registering a new account.
             None => {
+                // Hash the password using Blake3.
+                credentials.password = blake3::hash(credentials.password.as_bytes()).to_string();
+
                 let mut rng = self.rng.lock().await;
                 let user = User::new(credentials.username.clone(), credentials.password, &mut rng);
                 let _ = diesel::insert_into(users)
@@ -86,7 +89,11 @@ impl proto::registry_server::Registry for Registry {
         use diesel::query_dsl::methods::{FilterDsl, SelectDsl};
         use diesel::{ExpressionMethods, OptionalExtension, RunQueryDsl, SelectableHelper};
 
-        let credentials = request.into_inner();
+        let mut credentials = request.into_inner();
+
+        // Hash the password using Blake3.
+        credentials.password = blake3::hash(credentials.password.as_bytes()).to_string();
+
         let candidate_user = users
             .filter(username.eq(&credentials.username))
             .filter(password.eq(&credentials.password))