Struct mas_handlers::passwords::PasswordManager

pub struct PasswordManager { /* private fields */ }

Implementations

impl PasswordManager

pub fn new<I: IntoIterator<Item = (SchemeVersion, Hasher)>>( minimum_complexity: u8, iter: I, ) -> Result<Self, Error>

Creates a new PasswordManager from an iterator and a minimum allowed complexity score between 0 and 4. The first item in the iterator will be the default hashing scheme.

Example

pub use mas_handlers::passwords::{PasswordManager, Hasher};

PasswordManager::new(3, [
    (3, Hasher::argon2id(Some(b"a-secret-pepper".to_vec()))),
    (2, Hasher::argon2id(None)),
    (1, Hasher::bcrypt(Some(10), None)),
]).unwrap();

Errors

Returns an error if the iterator was empty

pub const fn disabled() -> Self

Creates a new disabled password manager

pub const fn is_enabled(&self) -> bool

Checks if the password manager is enabled or not

pub fn is_password_complex_enough(&self, password: &str) -> Result<bool, Error>

Returns true if and only if the given password satisfies the minimum complexity requirements.

Errors

Returns an error if the password manager is disabled

pub async fn hash<R: CryptoRng + RngCore + Send>( &self, rng: R, password: Zeroizing<Vec<u8>>, ) -> Result<(SchemeVersion, String), Error>

Hash a password with the default hashing scheme. Returns the version of the hashing scheme used and the hashed password.

Errors

Returns an error if the hashing failed or if the password manager is disabled

pub async fn verify( &self, scheme: SchemeVersion, password: Zeroizing<Vec<u8>>, hashed_password: String, ) -> Result<(), Error>

Verify a password hash for the given hashing scheme.

Errors

Returns an error if the password hash verification failed or if the password manager is disabled

pub async fn verify_and_upgrade<R: CryptoRng + RngCore + Send>( &self, rng: R, scheme: SchemeVersion, password: Zeroizing<Vec<u8>>, hashed_password: String, ) -> Result<Option<(SchemeVersion, String)>, Error>

Verify a password hash for the given hashing scheme, and upgrade it on the fly, if it was not hashed with the default scheme

Errors

Returns an error if the password hash verification failed or if the password manager is disabled

Trait Implementations

impl Clone for PasswordManager

fn clone(&self) -> PasswordManager

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.