21 lines
682 B
Python
21 lines
682 B
Python
|
from __future__ import annotations
|
||
|
|
|
||
|
|
import hashlib
|
||
|
|
|
||
|
|
from server.utils.auth_utils import AuthUtils
|
||
|
|
|
||
|
|
|
||
|
|
def test_hash_password_uses_argon2():
|
||
|
|
hashed = AuthUtils.hash_password("secret-password")
|
||
|
|
|
||
|
|
assert hashed.startswith("$argon2")
|
||
|
|
assert AuthUtils.verify_password(hashed, "secret-password") is True
|
||
|
|
assert AuthUtils.verify_password(hashed, "wrong-password") is False
|
||
|
|
|
||
|
|
|
||
|
|
def test_verify_password_accepts_legacy_sha256_format():
|
||
|
|
legacy_hash = hashlib.sha256(b"secret-passwordsalt").hexdigest()
|
||
|
|
|
||
|
|
assert AuthUtils.verify_password(f"{legacy_hash}:salt", "secret-password") is True
|
||
|
|
assert AuthUtils.verify_password(f"{legacy_hash}:salt", "wrong-password") is False
|