CryptographySuite.cs

Go to the documentation of this file.

using Microsoft.AspNetCore.Identity;
using System;
using System.Globalization;
using System.Security.Cryptography;
using Tgstation.Server.Host.Models;

namespace Tgstation.Server.Host.Security
{
    sealed class CryptographySuite : ICryptographySuite
    {
        const uint SecureStringLength = 30;

        readonly IPasswordHasher<User> passwordHasher;

        public CryptographySuite(IPasswordHasher<User> passwordHasher)
        {
            this.passwordHasher = passwordHasher ?? throw new ArgumentNullException(nameof(passwordHasher));
        }

        public byte[] GetSecureBytes(uint amount)
        {
            using (var rng = new RNGCryptoServiceProvider())
            {
                var byt = new byte[amount];
                rng.GetBytes(byt);
                return byt;
            }
        }

        public void SetUserPassword(User user, string newPassword, bool newUser)
        {
            if (user == null)
                throw new ArgumentNullException(nameof(user));
            if (newPassword == null)
                throw new ArgumentNullException(nameof(newPassword));
            user.PasswordHash = passwordHasher.HashPassword(user, newPassword);
            if (!newUser)
                user.LastPasswordUpdate = DateTimeOffset.Now;
        }

        public bool CheckUserPassword(User user, string password)
        {
            var result = passwordHasher.VerifyHashedPassword(user, user.PasswordHash, password);
            switch (result)
            {
                case PasswordVerificationResult.Failed:
                    return false;
                case PasswordVerificationResult.SuccessRehashNeeded:
                    SetUserPassword(user, password, false);
                    break;
                case PasswordVerificationResult.Success:
                    break;
                default:
                    throw new InvalidOperationException(String.Format(CultureInfo.InvariantCulture, "Password hasher return unknown PasswordVerificationResult: {0}", result));
            }

            return true;
        }

        public string GetSecureString() => Convert.ToBase64String(GetSecureBytes(SecureStringLength));
    }
}