mirrors/navidrome
1
0
Fork 0
mirror of https://github.com/navidrome/navidrome.git synced 2025-04-03 20:47:35 +03:00
Code Issues Projects Releases Packages Wiki Activity

Encrypt passwords in DB (#1187)

Browse source 
* Encode/Encrypt passwords in DB

* Only decrypts passwords if it is necessary

* Add tests for encryption functions
This commit is contained in:
Deluan Quintão 2021-06-18 18:38:38 -04:00 • committed by GitHub
parent d42dfafad4
commit 66b74c81f1
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
12 changed files with 302 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

38
utils/encrypt_test.go Normal file
View file

@ -0,0 +1,38 @@
package utils
import (
"context"
"crypto/sha256"
. "github.com/onsi/ginkgo"
. "github.com/onsi/gomega"
)
var _ = Describe("encrypt", func() {
It("decrypts correctly when using the same encryption key", func() {
sum := sha256.Sum256([]byte("password"))
encKey := sum[0:]
data := "Can you keep a secret?"
encrypted, err := Encrypt(context.Background(), encKey, data)
Expect(err).ToNot(HaveOccurred())
decrypted, err := Decrypt(context.Background(), encKey, encrypted)
Expect(err).ToNot(HaveOccurred())
Expect(decrypted).To(Equal(data))
})
It("fails to decrypt if not using the same encryption key", func() {
sum := sha256.Sum256([]byte("password"))
encKey := sum[0:]
data := "Can you keep a secret?"
encrypted, err := Encrypt(context.Background(), encKey, data)
Expect(err).ToNot(HaveOccurred())
sum = sha256.Sum256([]byte("different password"))
encKey = sum[0:]
_, err = Decrypt(context.Background(), encKey, encrypted)
Expect(err).To(MatchError("cipher: message authentication failed"))
})
})