jdb/timestamper
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Redesigned API URL structure. Updated ts_api to implement this.

Browse Source 
Implemented ts_api:list_timelines/2.
Adjusted ts_timeline:list/3 to be 0-indexed.
Changed ts_user password hash to use a random salt + SHA1
Added some skeleton testing code.
This commit is contained in:
Jonathan Bernard
2011-02-04 17:19:53 -06:00
parent 1575e25898
commit 6e2e0d5f00
10 changed files with 164 additions and 78 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
src/ts_user.erl
View File

@ -1,5 +1,6 @@
-module(ts_user).
-export([create_table/1, new/1, update/1, lookup/1, list/2]).
%-export([create_table/1, new/1, update/1, lookup/1, list/2]).
-compile(export_all).
-include("ts_db_records.hrl").
-include_lib("stdlib/include/qlc.hrl").
@ -30,17 +31,13 @@ lookup(Username) ->
list(Start, Length) -> ts_common:list(ts_user, Start, Length).
hash_input_record(User=#ts_user{}) ->
% generate the password salt
Salt = generate_salt(),
% hash the password
HashedPwd = hash_pwd(User#ts_user.username, Salt),
% create a new User record
{HashedPwd, Salt} = hash_pwd(User#ts_user.pwd),
User#ts_user{pwd = HashedPwd, pwd_salt = Salt}.
generate_salt() ->
"This is a worthless salt value only suitable for testing.".
generate_salt() -> crypto:rand_bytes(36).
hash_pwd(Password, Salt) -> do_hash(Password ++ Salt, []).
do_hash([], Hashed) -> Hashed;
do_hash([Char|Pwd], Hashed) -> do_hash(Pwd, [Char + 13 | Hashed]).
hash_pwd(Password) ->
Salt = generate_salt(),
Hashed = crypto:sha(Password ++ Salt),
{Hashed, Salt}.