mergre current develop
This commit is contained in:
@@ -65,15 +65,15 @@ abstract class AbstractAlgorithm implements IPasswordAlgorithm
|
||||
/**
|
||||
* @inheritdoc
|
||||
*/
|
||||
public function checkPassword($password, $dbHash)
|
||||
public function checkPassword($password, $dbHash, $salt = null)
|
||||
{
|
||||
return hash_equals($dbHash, $this->getPasswordHash($password));
|
||||
return hash_equals($dbHash, $this->getPasswordHash($password, $salt));
|
||||
}
|
||||
|
||||
/**
|
||||
* @inheritdoc
|
||||
*/
|
||||
public abstract function getPasswordHash($password);
|
||||
public abstract function getPasswordHash($password, $salt = null);
|
||||
|
||||
/**
|
||||
* @inheritdoc
|
||||
|
||||
@@ -38,7 +38,7 @@ abstract class AbstractCrypt extends AbstractAlgorithm
|
||||
/**
|
||||
* @inheritdoc
|
||||
*/
|
||||
public function checkPassword($password, $dbHash)
|
||||
public function checkPassword($password, $dbHash, $salt = null)
|
||||
{
|
||||
return hash_equals($dbHash, crypt($password, $dbHash));
|
||||
}
|
||||
@@ -46,7 +46,7 @@ abstract class AbstractCrypt extends AbstractAlgorithm
|
||||
/**
|
||||
* @inheritdoc
|
||||
*/
|
||||
public function getPasswordHash($password)
|
||||
public function getPasswordHash($password, $salt = null)
|
||||
{
|
||||
return crypt($password, $this->getSalt());
|
||||
}
|
||||
|
||||
@@ -43,7 +43,7 @@ class Cleartext extends AbstractAlgorithm
|
||||
/**
|
||||
* @inheritdoc
|
||||
*/
|
||||
public function getPasswordHash($password)
|
||||
public function getPasswordHash($password, $salt = null)
|
||||
{
|
||||
return $password;
|
||||
}
|
||||
|
||||
@@ -43,7 +43,7 @@ class CourierMD5 extends AbstractAlgorithm
|
||||
/**
|
||||
* @inheritdoc
|
||||
*/
|
||||
public function getPasswordHash($password)
|
||||
public function getPasswordHash($password, $salt = null)
|
||||
{
|
||||
return '{MD5}' . Utils::hexToBase64(md5($password));
|
||||
}
|
||||
|
||||
@@ -43,7 +43,7 @@ class CourierMD5Raw extends AbstractAlgorithm
|
||||
/**
|
||||
* @inheritdoc
|
||||
*/
|
||||
public function getPasswordHash($password)
|
||||
public function getPasswordHash($password, $salt = null)
|
||||
{
|
||||
return '{MD5RAW}' . md5($password);
|
||||
}
|
||||
|
||||
@@ -43,7 +43,7 @@ class CourierSHA1 extends AbstractAlgorithm
|
||||
/**
|
||||
* @inheritdoc
|
||||
*/
|
||||
public function getPasswordHash($password)
|
||||
public function getPasswordHash($password, $salt = null)
|
||||
{
|
||||
return '{SHA}' . Utils::hexToBase64(sha1($password));
|
||||
}
|
||||
|
||||
@@ -43,7 +43,7 @@ class CourierSHA256 extends AbstractAlgorithm
|
||||
/**
|
||||
* @inheritdoc
|
||||
*/
|
||||
public function getPasswordHash($password)
|
||||
public function getPasswordHash($password, $salt = null)
|
||||
{
|
||||
return '{SHA256}' . Utils::hexToBase64(hash('sha256', $password));
|
||||
}
|
||||
|
||||
@@ -44,7 +44,7 @@ class Crypt extends AbstractCrypt
|
||||
/**
|
||||
* @inheritdoc
|
||||
*/
|
||||
public function getPasswordHash($password)
|
||||
public function getPasswordHash($password, $salt = null)
|
||||
{
|
||||
return password_hash($password, PASSWORD_DEFAULT);
|
||||
}
|
||||
|
||||
@@ -81,7 +81,7 @@ class CryptArgon2 extends AbstractAlgorithm
|
||||
/**
|
||||
* @inheritdoc
|
||||
*/
|
||||
public function checkPassword($password, $dbHash)
|
||||
public function checkPassword($password, $dbHash, $salt = null)
|
||||
{
|
||||
return password_verify($password, $dbHash);
|
||||
}
|
||||
@@ -89,7 +89,7 @@ class CryptArgon2 extends AbstractAlgorithm
|
||||
/**
|
||||
* @inheritdoc
|
||||
*/
|
||||
public function getPasswordHash($password)
|
||||
public function getPasswordHash($password, $salt = null)
|
||||
{
|
||||
return password_hash(
|
||||
$password, PASSWORD_ARGON2I, [
|
||||
|
||||
@@ -52,7 +52,7 @@ class CryptBlowfish extends AbstractAlgorithm
|
||||
/**
|
||||
* @inheritdoc
|
||||
*/
|
||||
public function checkPassword($password, $dbHash)
|
||||
public function checkPassword($password, $dbHash, $salt = null)
|
||||
{
|
||||
return password_verify($password, $dbHash);
|
||||
}
|
||||
@@ -60,7 +60,7 @@ class CryptBlowfish extends AbstractAlgorithm
|
||||
/**
|
||||
* @inheritdoc
|
||||
*/
|
||||
public function getPasswordHash($password)
|
||||
public function getPasswordHash($password, $salt = null)
|
||||
{
|
||||
return password_hash(
|
||||
$password, PASSWORD_BCRYPT, ["cost" => $this->cost]
|
||||
|
||||
@@ -42,20 +42,22 @@ interface IPasswordAlgorithm
|
||||
* This value is stored in the database, when the password is changed.
|
||||
*
|
||||
* @param String $password The new password.
|
||||
* @param String $salt Optional. Salt value.
|
||||
*
|
||||
* @return boolean True if the password was hashed successfully, false otherwise.
|
||||
*/
|
||||
public function getPasswordHash($password);
|
||||
public function getPasswordHash($password, $salt = null);
|
||||
|
||||
/**
|
||||
* Check password given by the user against hash stored in the database.
|
||||
*
|
||||
* @param String $password Password given by the user.
|
||||
* @param String $dbHash Password hash stored in the database.
|
||||
* @param String $salt Optional. Salt value.
|
||||
*
|
||||
* @return boolean True if the password is correct, false otherwise.
|
||||
*/
|
||||
public function checkPassword($password, $dbHash);
|
||||
public function checkPassword($password, $dbHash, $salt = null);
|
||||
|
||||
/**
|
||||
* Configuration for the algorithm.
|
||||
|
||||
@@ -43,7 +43,7 @@ class Joomla extends AbstractAlgorithm
|
||||
/**
|
||||
* @inheritdoc
|
||||
*/
|
||||
public function getPasswordHash($password)
|
||||
public function getPasswordHash($password, $salt = null)
|
||||
{
|
||||
$salt = Utils::randomString(
|
||||
32, "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz"
|
||||
@@ -55,7 +55,7 @@ class Joomla extends AbstractAlgorithm
|
||||
/**
|
||||
* @inheritdoc
|
||||
*/
|
||||
public function checkPassword($password, $dbHash)
|
||||
public function checkPassword($password, $dbHash, $salt = null)
|
||||
{
|
||||
return hash_equals($dbHash, self::generateHash($password, $dbHash));
|
||||
}
|
||||
|
||||
@@ -43,7 +43,7 @@ class MD5 extends AbstractAlgorithm
|
||||
/**
|
||||
* @inheritdoc
|
||||
*/
|
||||
public function getPasswordHash($password)
|
||||
public function getPasswordHash($password, $salt = null)
|
||||
{
|
||||
return md5($password);
|
||||
}
|
||||
|
||||
@@ -50,7 +50,7 @@ class Phpass extends AbstractAlgorithm
|
||||
/**
|
||||
* @inheritdoc
|
||||
*/
|
||||
public function checkPassword($password, $dbHash)
|
||||
public function checkPassword($password, $dbHash, $salt = null)
|
||||
{
|
||||
return hash_equals($dbHash, $this->crypt($password, $dbHash));
|
||||
}
|
||||
@@ -136,7 +136,7 @@ class Phpass extends AbstractAlgorithm
|
||||
/**
|
||||
* @inheritdoc
|
||||
*/
|
||||
public function getPasswordHash($password)
|
||||
public function getPasswordHash($password, $salt = null)
|
||||
{
|
||||
return $this->crypt($password, $this->genSalt());
|
||||
}
|
||||
|
||||
50
lib/Crypto/Redmine.php
Normal file
50
lib/Crypto/Redmine.php
Normal file
@@ -0,0 +1,50 @@
|
||||
<?php
|
||||
/**
|
||||
* Nextcloud - user_sql
|
||||
*
|
||||
* @copyright 2018 Marcin Łojewski <dev@mlojewski.me>
|
||||
* @author Marcin Łojewski <dev@mlojewski.me>
|
||||
*
|
||||
* This program is free software: you can redistribute it and/or modify
|
||||
* it under the terms of the GNU Affero General Public License as
|
||||
* published by the Free Software Foundation, either version 3 of the
|
||||
* License, or (at your option) any later version.
|
||||
*
|
||||
* This program is distributed in the hope that it will be useful,
|
||||
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
* GNU Affero General Public License for more details.
|
||||
*
|
||||
* You should have received a copy of the GNU Affero General Public License
|
||||
* along with this program. If not, see <https://www.gnu.org/licenses/>.
|
||||
*/
|
||||
|
||||
namespace OCA\UserSQL\Crypto;
|
||||
|
||||
/**
|
||||
* Redmine MD5 hash implementation.
|
||||
*
|
||||
* @author Marcin Łojewski <dev@mlojewski.me>
|
||||
*/
|
||||
class Redmine extends AbstractAlgorithm
|
||||
{
|
||||
/**
|
||||
* @inheritdoc
|
||||
*/
|
||||
public function getPasswordHash($password, $salt = null)
|
||||
{
|
||||
if (is_null($salt)) {
|
||||
return false;
|
||||
}
|
||||
|
||||
return sha1($salt . sha1($password));
|
||||
}
|
||||
|
||||
/**
|
||||
* @inheritdoc
|
||||
*/
|
||||
protected function getAlgorithmName()
|
||||
{
|
||||
return "Redmine";
|
||||
}
|
||||
}
|
||||
@@ -24,7 +24,7 @@ namespace OCA\UserSQL\Crypto;
|
||||
use OCP\IL10N;
|
||||
|
||||
/**
|
||||
* SHA1 hash implementation.
|
||||
* SHA-1 hash implementation.
|
||||
*
|
||||
* @author Marcin Łojewski <dev@mlojewski.me>
|
||||
*/
|
||||
@@ -43,7 +43,7 @@ class SHA1 extends AbstractAlgorithm
|
||||
/**
|
||||
* @inheritdoc
|
||||
*/
|
||||
public function getPasswordHash($password)
|
||||
public function getPasswordHash($password, $salt = null)
|
||||
{
|
||||
return sha1($password);
|
||||
}
|
||||
@@ -53,6 +53,6 @@ class SHA1 extends AbstractAlgorithm
|
||||
*/
|
||||
protected function getAlgorithmName()
|
||||
{
|
||||
return "SHA1";
|
||||
return "SHA-1";
|
||||
}
|
||||
}
|
||||
|
||||
58
lib/Crypto/SHA256.php
Normal file
58
lib/Crypto/SHA256.php
Normal file
@@ -0,0 +1,58 @@
|
||||
<?php
|
||||
/**
|
||||
* Nextcloud - user_sql
|
||||
*
|
||||
* @copyright 2018 Marcin Łojewski <dev@mlojewski.me>
|
||||
* @author Marcin Łojewski <dev@mlojewski.me>
|
||||
*
|
||||
* This program is free software: you can redistribute it and/or modify
|
||||
* it under the terms of the GNU Affero General Public License as
|
||||
* published by the Free Software Foundation, either version 3 of the
|
||||
* License, or (at your option) any later version.
|
||||
*
|
||||
* This program is distributed in the hope that it will be useful,
|
||||
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
* GNU Affero General Public License for more details.
|
||||
*
|
||||
* You should have received a copy of the GNU Affero General Public License
|
||||
* along with this program. If not, see <https://www.gnu.org/licenses/>.
|
||||
*/
|
||||
|
||||
namespace OCA\UserSQL\Crypto;
|
||||
|
||||
use OCP\IL10N;
|
||||
|
||||
/**
|
||||
* SHA-256 hash implementation.
|
||||
*
|
||||
* @author Marcin Łojewski <dev@mlojewski.me>
|
||||
*/
|
||||
class SHA256 extends AbstractAlgorithm
|
||||
{
|
||||
/**
|
||||
* The class constructor.
|
||||
*
|
||||
* @param IL10N $localization The localization service.
|
||||
*/
|
||||
public function __construct(IL10N $localization)
|
||||
{
|
||||
parent::__construct($localization);
|
||||
}
|
||||
|
||||
/**
|
||||
* @inheritdoc
|
||||
*/
|
||||
public function getPasswordHash($password, $salt = null)
|
||||
{
|
||||
return hash('sha256', $password);
|
||||
}
|
||||
|
||||
/**
|
||||
* @inheritdoc
|
||||
*/
|
||||
protected function getAlgorithmName()
|
||||
{
|
||||
return "SHA-256";
|
||||
}
|
||||
}
|
||||
58
lib/Crypto/SHA512.php
Normal file
58
lib/Crypto/SHA512.php
Normal file
@@ -0,0 +1,58 @@
|
||||
<?php
|
||||
/**
|
||||
* Nextcloud - user_sql
|
||||
*
|
||||
* @copyright 2018 Marcin Łojewski <dev@mlojewski.me>
|
||||
* @author Marcin Łojewski <dev@mlojewski.me>
|
||||
*
|
||||
* This program is free software: you can redistribute it and/or modify
|
||||
* it under the terms of the GNU Affero General Public License as
|
||||
* published by the Free Software Foundation, either version 3 of the
|
||||
* License, or (at your option) any later version.
|
||||
*
|
||||
* This program is distributed in the hope that it will be useful,
|
||||
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
* GNU Affero General Public License for more details.
|
||||
*
|
||||
* You should have received a copy of the GNU Affero General Public License
|
||||
* along with this program. If not, see <https://www.gnu.org/licenses/>.
|
||||
*/
|
||||
|
||||
namespace OCA\UserSQL\Crypto;
|
||||
|
||||
use OCP\IL10N;
|
||||
|
||||
/**
|
||||
* SHA-512 hash implementation.
|
||||
*
|
||||
* @author Marcin Łojewski <dev@mlojewski.me>
|
||||
*/
|
||||
class SHA512 extends AbstractAlgorithm
|
||||
{
|
||||
/**
|
||||
* The class constructor.
|
||||
*
|
||||
* @param IL10N $localization The localization service.
|
||||
*/
|
||||
public function __construct(IL10N $localization)
|
||||
{
|
||||
parent::__construct($localization);
|
||||
}
|
||||
|
||||
/**
|
||||
* @inheritdoc
|
||||
*/
|
||||
public function getPasswordHash($password, $salt = null)
|
||||
{
|
||||
return hash('sha512', $password);
|
||||
}
|
||||
|
||||
/**
|
||||
* @inheritdoc
|
||||
*/
|
||||
protected function getAlgorithmName()
|
||||
{
|
||||
return "SHA-512";
|
||||
}
|
||||
}
|
||||
@@ -24,7 +24,7 @@ namespace OCA\UserSQL\Crypto;
|
||||
use OCP\IL10N;
|
||||
|
||||
/**
|
||||
* SHA512 Whirlpool hash implementation.
|
||||
* SHA-512 Whirlpool hash implementation.
|
||||
*
|
||||
* @author Marcin Łojewski <dev@mlojewski.me>
|
||||
*/
|
||||
@@ -43,7 +43,7 @@ class SHA512Whirlpool extends AbstractAlgorithm
|
||||
/**
|
||||
* @inheritdoc
|
||||
*/
|
||||
public function getPasswordHash($password)
|
||||
public function getPasswordHash($password, $salt = null)
|
||||
{
|
||||
return hash('sha512', hash('whirlpool', $password));
|
||||
}
|
||||
@@ -53,6 +53,6 @@ class SHA512Whirlpool extends AbstractAlgorithm
|
||||
*/
|
||||
protected function getAlgorithmName()
|
||||
{
|
||||
return "SHA512 Whirlpool";
|
||||
return "SHA-512 Whirlpool";
|
||||
}
|
||||
}
|
||||
|
||||
@@ -43,7 +43,7 @@ abstract class SSHA extends AbstractAlgorithm
|
||||
/**
|
||||
* @inheritdoc
|
||||
*/
|
||||
public function checkPassword($password, $dbHash)
|
||||
public function checkPassword($password, $dbHash, $salt = null)
|
||||
{
|
||||
$saltedPassword = base64_decode(
|
||||
preg_replace("/" . $this->getPrefix() . "/i", "", $dbHash)
|
||||
@@ -94,7 +94,7 @@ abstract class SSHA extends AbstractAlgorithm
|
||||
/**
|
||||
* @inheritdoc
|
||||
*/
|
||||
public function getPasswordHash($password)
|
||||
public function getPasswordHash($password, $salt = null)
|
||||
{
|
||||
return self::ssha(
|
||||
$password, Utils::randomString(
|
||||
|
||||
@@ -31,7 +31,7 @@ class WCF2 extends AbstractCrypt
|
||||
/**
|
||||
* @inheritdoc
|
||||
*/
|
||||
public function checkPassword($password, $dbHash)
|
||||
public function checkPassword($password, $dbHash, $salt = null)
|
||||
{
|
||||
return hash_equals($dbHash, crypt(crypt($password, $dbHash), $dbHash));
|
||||
}
|
||||
@@ -39,7 +39,7 @@ class WCF2 extends AbstractCrypt
|
||||
/**
|
||||
* @inheritdoc
|
||||
*/
|
||||
public function getPasswordHash($password)
|
||||
public function getPasswordHash($password, $salt = null)
|
||||
{
|
||||
$salt = $this->getSalt();
|
||||
return crypt(crypt($password, $salt), $salt);
|
||||
|
||||
@@ -43,7 +43,7 @@ class Whirlpool extends AbstractAlgorithm
|
||||
/**
|
||||
* @inheritdoc
|
||||
*/
|
||||
public function getPasswordHash($password)
|
||||
public function getPasswordHash($password, $salt = null)
|
||||
{
|
||||
return hash('whirlpool', $password);
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user