CryptographySuite.cs

Go to the documentation of this file.

using Microsoft.AspNetCore.Identity;
using System;
using System.Security.Cryptography;
using Tgstation.Server.Host.Models;

namespace Tgstation.Server.Host.Security
{
    sealed class CryptographySuite : ICryptographySuite
    {
        const uint SecureStringLength = 30;

        readonly IPasswordHasher<User> passwordHasher;

        public CryptographySuite(IPasswordHasher<User> passwordHasher)
        {
            this.passwordHasher = passwordHasher ?? throw new ArgumentNullException(nameof(passwordHasher));
        }

        public byte[] GetSecureBytes(uint amount)
        {
            using (var rng = new RNGCryptoServiceProvider())
            {
                var byt = new byte[amount];
                rng.GetBytes(byt);
                return byt;
            }
        }

        public void SetUserPassword(User user, string newPassword, bool newUser)
        {
            if (user == null)
                throw new ArgumentNullException(nameof(user));
            if (newPassword == null)
                throw new ArgumentNullException(nameof(newPassword));
            user.PasswordHash = passwordHasher.HashPassword(user, newPassword);
            if (!newUser)
                user.LastPasswordUpdate = DateTimeOffset.Now;
        }

        public bool CheckUserPassword(User user, string password)
        {
            switch (passwordHasher.VerifyHashedPassword(user, user.PasswordHash, password))
            {
                case PasswordVerificationResult.Failed:
                    return false;
                case PasswordVerificationResult.SuccessRehashNeeded:
                    SetUserPassword(user, password, false);
                    break;
            }
            return true;
        }

        public string GetSecureString() => Convert.ToBase64String(GetSecureBytes(SecureStringLength));
    }
}