mirror of
https://github.com/launchbadge/sqlx
synced 2024-09-20 14:21:57 +00:00
Implememnt SASL Authentication
This commit is contained in:
Daniel Akhterov
Ryan Leckey
parent
fec6101e1a
commit
507d988fc4
8 changed files with 324 additions and 24 deletions
37
Cargo.lock
generated
37
Cargo.lock
generated
|
|
@ -313,6 +313,15 @@ dependencies = [
|
|||
"lazy_static 1.4.0 (registry+https://github.com/rust-lang/crates.io-index)",
|
||||
]
|
||||
|
||||
[[package]]
|
||||
name = "crypto-mac"
|
||||
version = "0.7.0"
|
||||
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||
dependencies = [
|
||||
"generic-array 0.12.3 (registry+https://github.com/rust-lang/crates.io-index)",
|
||||
"subtle 1.0.0 (registry+https://github.com/rust-lang/crates.io-index)",
|
||||
]
|
||||
|
||||
[[package]]
|
||||
name = "data-encoding"
|
||||
version = "2.1.2"
|
||||
|
|
@ -557,6 +566,20 @@ dependencies = [
|
|||
"libc 0.2.66 (registry+https://github.com/rust-lang/crates.io-index)",
|
||||
]
|
||||
|
||||
[[package]]
|
||||
name = "hex"
|
||||
version = "0.4.0"
|
||||
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||
|
||||
[[package]]
|
||||
name = "hmac"
|
||||
version = "0.7.1"
|
||||
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||
dependencies = [
|
||||
"crypto-mac 0.7.0 (registry+https://github.com/rust-lang/crates.io-index)",
|
||||
"digest 0.8.1 (registry+https://github.com/rust-lang/crates.io-index)",
|
||||
]
|
||||
|
||||
[[package]]
|
||||
name = "http"
|
||||
version = "0.1.21"
|
||||
|
|
@ -1164,6 +1187,7 @@ dependencies = [
|
|||
"async-std 1.4.0 (registry+https://github.com/rust-lang/crates.io-index)",
|
||||
"dotenv 0.15.0 (registry+https://github.com/rust-lang/crates.io-index)",
|
||||
"futures 0.3.1 (registry+https://github.com/rust-lang/crates.io-index)",
|
||||
"hex 0.4.0 (registry+https://github.com/rust-lang/crates.io-index)",
|
||||
"proc-macro-hack 0.5.11 (registry+https://github.com/rust-lang/crates.io-index)",
|
||||
"sqlx-core 0.1.3",
|
||||
"sqlx-macros 0.1.1",
|
||||
|
|
@ -1186,6 +1210,8 @@ dependencies = [
|
|||
"futures-core 0.3.1 (registry+https://github.com/rust-lang/crates.io-index)",
|
||||
"futures-util 0.3.1 (registry+https://github.com/rust-lang/crates.io-index)",
|
||||
"generic-array 0.12.3 (registry+https://github.com/rust-lang/crates.io-index)",
|
||||
"hex 0.4.0 (registry+https://github.com/rust-lang/crates.io-index)",
|
||||
"hmac 0.7.1 (registry+https://github.com/rust-lang/crates.io-index)",
|
||||
"log 0.4.8 (registry+https://github.com/rust-lang/crates.io-index)",
|
||||
"matches 0.1.8 (registry+https://github.com/rust-lang/crates.io-index)",
|
||||
"md-5 0.8.0 (registry+https://github.com/rust-lang/crates.io-index)",
|
||||
|
|
@ -1238,6 +1264,11 @@ dependencies = [
|
|||
"bytes 0.4.12 (registry+https://github.com/rust-lang/crates.io-index)",
|
||||
]
|
||||
|
||||
[[package]]
|
||||
name = "subtle"
|
||||
version = "1.0.0"
|
||||
source = "registry+https://github.com/rust-lang/crates.io-index"
|
||||
|
||||
[[package]]
|
||||
name = "syn"
|
||||
version = "1.0.13"
|
||||
|
|
@ -1579,6 +1610,7 @@ dependencies = [
|
|||
"checksum crossbeam-queue 0.2.1 (registry+https://github.com/rust-lang/crates.io-index)" = "c695eeca1e7173472a32221542ae469b3e9aac3a4fc81f7696bcad82029493db"
|
||||
"checksum crossbeam-utils 0.6.6 (registry+https://github.com/rust-lang/crates.io-index)" = "04973fa96e96579258a5091af6003abde64af786b860f18622b82e026cca60e6"
|
||||
"checksum crossbeam-utils 0.7.0 (registry+https://github.com/rust-lang/crates.io-index)" = "ce446db02cdc3165b94ae73111e570793400d0794e46125cc4056c81cbb039f4"
|
||||
"checksum crypto-mac 0.7.0 (registry+https://github.com/rust-lang/crates.io-index)" = "4434400df11d95d556bac068ddfedd482915eb18fe8bea89bc80b6e4b1c179e5"
|
||||
"checksum data-encoding 2.1.2 (registry+https://github.com/rust-lang/crates.io-index)" = "f4f47ca1860a761136924ddd2422ba77b2ea54fe8cc75b9040804a0d9d32ad97"
|
||||
"checksum digest 0.8.1 (registry+https://github.com/rust-lang/crates.io-index)" = "f3d0c8c8752312f9713efd397ff63acb9f85585afbf179282e720e7704954dd5"
|
||||
"checksum dotenv 0.15.0 (registry+https://github.com/rust-lang/crates.io-index)" = "77c90badedccf4105eca100756a0b1289e191f6fcbdadd3cee1d2f614f97da8f"
|
||||
|
|
@ -1608,7 +1640,9 @@ dependencies = [
|
|||
"checksum generic-array 0.12.3 (registry+https://github.com/rust-lang/crates.io-index)" = "c68f0274ae0e023facc3c97b2e00f076be70e254bc851d972503b328db79b2ec"
|
||||
"checksum getrandom 0.1.14 (registry+https://github.com/rust-lang/crates.io-index)" = "7abc8dd8451921606d809ba32e95b6111925cd2906060d2dcc29c070220503eb"
|
||||
"checksum h2 0.1.26 (registry+https://github.com/rust-lang/crates.io-index)" = "a5b34c246847f938a410a03c5458c7fee2274436675e76d8b903c08efc29c462"
|
||||
"checksum hermit-abi 0.1.6 (registry+https://github.com/rust-lang/crates.io-index)" = "eff2656d88f158ce120947499e971d743c05dbcbed62e5bd2f38f1698bbc3772"
|
||||
"checksum hermit-abi 0.1.5 (registry+https://github.com/rust-lang/crates.io-index)" = "f629dc602392d3ec14bfc8a09b5e644d7ffd725102b48b81e59f90f2633621d7"
|
||||
"checksum hex 0.4.0 (registry+https://github.com/rust-lang/crates.io-index)" = "023b39be39e3a2da62a94feb433e91e8bcd37676fbc8bea371daf52b7a769a3e"
|
||||
"checksum hmac 0.7.1 (registry+https://github.com/rust-lang/crates.io-index)" = "5dcb5e64cda4c23119ab41ba960d1e170a774c8e4b9d9e6a9bc18aabf5e59695"
|
||||
"checksum http 0.1.21 (registry+https://github.com/rust-lang/crates.io-index)" = "d6ccf5ede3a895d8856620237b2f02972c1bbc78d2965ad7fe8838d4a0ed41f0"
|
||||
"checksum http-body 0.1.0 (registry+https://github.com/rust-lang/crates.io-index)" = "6741c859c1b2463a423a1dbce98d418e6c3c3fc720fb0d45528657320920292d"
|
||||
"checksum http-service 0.4.0 (registry+https://github.com/rust-lang/crates.io-index)" = "9625f605ddfaf894bf78a544a7b8e31f562dc843654723a49892d9c7e75ac708"
|
||||
|
|
@ -1682,6 +1716,7 @@ dependencies = [
|
|||
"checksum smallvec 1.1.0 (registry+https://github.com/rust-lang/crates.io-index)" = "44e59e0c9fa00817912ae6e4e6e3c4fe04455e75699d06eedc7d85917ed8e8f4"
|
||||
"checksum spin 0.5.2 (registry+https://github.com/rust-lang/crates.io-index)" = "6e63cff320ae2c57904679ba7cb63280a3dc4613885beafb148ee7bf9aa9042d"
|
||||
"checksum string 0.2.1 (registry+https://github.com/rust-lang/crates.io-index)" = "d24114bfcceb867ca7f71a0d3fe45d45619ec47a6fbfa98cb14e14250bfa5d6d"
|
||||
"checksum subtle 1.0.0 (registry+https://github.com/rust-lang/crates.io-index)" = "2d67a5a62ba6e01cb2192ff309324cb4875d0c451d55fe2319433abe7a05a8ee"
|
||||
"checksum syn 1.0.13 (registry+https://github.com/rust-lang/crates.io-index)" = "1e4ff033220a41d1a57d8125eab57bf5263783dfdcc18688b1dacc6ce9651ef8"
|
||||
"checksum termcolor 1.0.5 (registry+https://github.com/rust-lang/crates.io-index)" = "96d6098003bde162e4277c70665bd87c326f5a0c3f3fbfb285787fa482d54e6e"
|
||||
"checksum thread_local 1.0.0 (registry+https://github.com/rust-lang/crates.io-index)" = "88ddf1ad580c7e3d1efff877d972bcc93f995556b9087a5a259630985c88ceab"
|
||||
|
|
|
|||
|
|
@ -43,6 +43,7 @@ uuid = [ "sqlx-core/uuid", "sqlx-macros/uuid" ]
|
|||
sqlx-core = { version = "=0.1.3", path = "sqlx-core" }
|
||||
sqlx-macros = { version = "0.1.1", path = "sqlx-macros", optional = true }
|
||||
proc-macro-hack = { version = "0.5.11", optional = true }
|
||||
hex = "0.4.0"
|
||||
|
||||
[dev-dependencies]
|
||||
anyhow = "1.0.26"
|
||||
|
|
|
|||
|
|
@ -18,7 +18,7 @@ all-features = true
|
|||
[features]
|
||||
default = []
|
||||
unstable = []
|
||||
postgres = [ "md-5" ]
|
||||
postgres = [ "md-5", "sha2", "base64", "sha-1", "rand" ]
|
||||
mysql = [ "sha-1", "sha2", "generic-array", "num-bigint", "base64", "digest", "rand" ]
|
||||
|
||||
[dependencies]
|
||||
|
|
@ -44,6 +44,8 @@ sha-1 = { version = "0.8.1", default-features = false, optional = true }
|
|||
sha2 = { version = "0.8.0", default-features = false, optional = true }
|
||||
url = { version = "2.1.0", default-features = false }
|
||||
uuid = { version = "0.8.1", default-features = false, optional = true }
|
||||
hex = "0.4.0"
|
||||
hmac = "0.7.1"
|
||||
|
||||
[dev-dependencies]
|
||||
matches = "0.1.8"
|
||||
|
|
|
|||
|
|
@ -10,6 +10,7 @@ use crate::io::{Buf, BufStream};
|
|||
use crate::postgres::protocol::{self, Decode, Encode, Message, StatementId};
|
||||
use crate::postgres::PgError;
|
||||
use crate::url::Url;
|
||||
use std::ops::Deref;
|
||||
|
||||
/// An asynchronous connection to a [Postgres] database.
|
||||
///
|
||||
|
|
@ -92,6 +93,29 @@ impl PgConnection {
|
|||
self.stream.flush().await?;
|
||||
}
|
||||
|
||||
protocol::Authentication::Sasl { mechanisms } => {
|
||||
let mechanism = (*mechanisms)
|
||||
.get(0)
|
||||
.ok_or(protocol_err!(
|
||||
"Expected mechanisms SCRAM-SHA-256, but received {:?}",
|
||||
mechanisms
|
||||
))?
|
||||
.deref();
|
||||
if "SCRAM-SHA-256" == &*mechanism {
|
||||
protocol::sasl_auth(
|
||||
self,
|
||||
username,
|
||||
url.password().unwrap_or_default(),
|
||||
)
|
||||
.await
|
||||
} else {
|
||||
Err(protocol_err!(
|
||||
"Expected mechanisms SCRAM-SHA-256, but received {:?}",
|
||||
mechanisms
|
||||
))?
|
||||
}?;
|
||||
}
|
||||
|
||||
auth => {
|
||||
return Err(protocol_err!(
|
||||
"requires unimplemented authentication method: {:?}",
|
||||
|
|
|
|||
|
|
@ -1,6 +1,7 @@
|
|||
use crate::io::Buf;
|
||||
use crate::postgres::protocol::Decode;
|
||||
use byteorder::NetworkEndian;
|
||||
use std::borrow::Cow;
|
||||
use std::io;
|
||||
|
||||
#[derive(Debug)]
|
||||
|
|
@ -36,12 +37,20 @@ pub enum Authentication {
|
|||
Sasl { mechanisms: Box<[Box<str>]> },
|
||||
|
||||
/// This message contains a SASL challenge.
|
||||
SaslContinue { data: Box<[u8]> },
|
||||
SaslContinue(SaslContinue),
|
||||
|
||||
/// SASL authentication has completed.
|
||||
SaslFinal { data: Box<[u8]> },
|
||||
}
|
||||
|
||||
#[derive(Debug)]
|
||||
pub struct SaslContinue {
|
||||
pub salt: Vec<u8>,
|
||||
pub iter_count: u32,
|
||||
pub nonce: Vec<u8>,
|
||||
pub data: String,
|
||||
}
|
||||
|
||||
impl Decode for Authentication {
|
||||
fn decode(mut buf: &[u8]) -> crate::Result<Self> {
|
||||
Ok(match buf.get_u32::<NetworkEndian>()? {
|
||||
|
|
@ -86,12 +95,34 @@ impl Decode for Authentication {
|
|||
}
|
||||
|
||||
11 => {
|
||||
let mut data = Vec::with_capacity(buf.len());
|
||||
data.extend_from_slice(buf);
|
||||
let mut salt: Vec<u8> = Vec::new();
|
||||
let mut nonce: Vec<u8> = Vec::new();
|
||||
let mut iter_count: u32 = 0;
|
||||
|
||||
Authentication::SaslContinue {
|
||||
data: data.into_boxed_slice(),
|
||||
}
|
||||
buf.split(|byte| *byte == b',')
|
||||
.map(|s| {
|
||||
let (key, value) = s.split_at(1);
|
||||
let value = value.split_at(1).1;
|
||||
|
||||
(key[0] as char, value)
|
||||
})
|
||||
.for_each(|(key, value)| match key {
|
||||
's' => salt = value.to_vec(),
|
||||
'r' => nonce = value.to_vec(),
|
||||
'i' => {
|
||||
iter_count = u32::from_str_radix(&String::from_utf8_lossy(&value), 10)
|
||||
.unwrap_or(0);
|
||||
}
|
||||
|
||||
_ => {}
|
||||
});
|
||||
|
||||
Authentication::SaslContinue(SaslContinue {
|
||||
salt: base64::decode(&salt).unwrap(),
|
||||
nonce,
|
||||
iter_count,
|
||||
data: String::from_utf8_lossy(buf).into_owned(),
|
||||
})
|
||||
}
|
||||
|
||||
12 => {
|
||||
|
|
|
|||
|
|
@ -15,6 +15,7 @@ mod flush;
|
|||
mod parse;
|
||||
mod password_message;
|
||||
mod query;
|
||||
mod sasl;
|
||||
mod startup_message;
|
||||
mod statement;
|
||||
mod sync;
|
||||
|
|
@ -30,6 +31,7 @@ pub use flush::Flush;
|
|||
pub use parse::Parse;
|
||||
pub use password_message::PasswordMessage;
|
||||
pub use query::Query;
|
||||
pub use sasl::{sasl_auth, SaslInitialResponse, SaslResponse};
|
||||
pub use startup_message::StartupMessage;
|
||||
pub use statement::StatementId;
|
||||
pub use sync::Sync;
|
||||
|
|
|
|||
205
sqlx-core/src/postgres/protocol/sasl.rs
Normal file
205
sqlx-core/src/postgres/protocol/sasl.rs
Normal file
|
|
@ -0,0 +1,205 @@
|
|||
use crate::io::BufMut;
|
||||
use crate::postgres::connection::PgConnection;
|
||||
use crate::postgres::protocol::authentication::Authentication::SaslContinue;
|
||||
use crate::postgres::protocol::Encode;
|
||||
use crate::postgres::protocol::Message;
|
||||
use crate::Result;
|
||||
use byteorder::NetworkEndian;
|
||||
use hmac::{Hmac, Mac};
|
||||
use rand::Rng;
|
||||
use sha2::{Digest, Sha256};
|
||||
|
||||
pub struct SaslInitialResponse {
|
||||
// pub username: String,
|
||||
// pub passord: String,
|
||||
pub s: String,
|
||||
}
|
||||
|
||||
impl Encode for SaslInitialResponse {
|
||||
fn encode(&self, buf: &mut Vec<u8>) {
|
||||
buf.push(b'p');
|
||||
buf.put_u32::<NetworkEndian>(4u32 + self.s.as_str().as_bytes().len() as u32 + 14u32 + 4u32);
|
||||
buf.put_str_nul("SCRAM-SHA-256");
|
||||
buf.put_u32::<NetworkEndian>(self.s.as_str().as_bytes().len() as u32);
|
||||
buf.extend_from_slice(self.s.as_str().as_bytes());
|
||||
}
|
||||
}
|
||||
|
||||
pub struct SaslResponse {
|
||||
pub s: String,
|
||||
}
|
||||
|
||||
impl Encode for SaslResponse {
|
||||
fn encode(&self, buf: &mut Vec<u8>) {
|
||||
buf.push(b'p');
|
||||
buf.put_u32::<NetworkEndian>(4u32 + self.s.as_str().as_bytes().len() as u32);
|
||||
buf.extend_from_slice(self.s.as_str().as_bytes());
|
||||
}
|
||||
}
|
||||
|
||||
static GS2_HEADER: &'static str = "n,,";
|
||||
static CHANNEL_ATTR: &'static str = "c";
|
||||
static USERNAME_ATTR: &'static str = "n";
|
||||
static CLIENT_PROOF_ATTR: &'static str = "p";
|
||||
static NONCE_ATTR: &'static str = "r";
|
||||
|
||||
pub fn nonce() -> String {
|
||||
let mut rng = rand::thread_rng();
|
||||
let count = rng.gen_range(64, 128);
|
||||
// printable = %x21-2B / %x2D-7E
|
||||
// ;; Printable ASCII except ",".
|
||||
// ;; Note that any "printable" is also
|
||||
// ;; a valid "value".
|
||||
let nonce: String = std::iter::repeat(())
|
||||
.map(|()| {
|
||||
let mut c = rng.gen_range(0x21, 0x7F) as u8;
|
||||
|
||||
while c == 0x2C {
|
||||
c = rng.gen_range(0x21, 0x7F) as u8;
|
||||
}
|
||||
|
||||
c
|
||||
})
|
||||
.take(count)
|
||||
.map(|c| c as char)
|
||||
.collect();
|
||||
|
||||
rng.gen_range(32, 128);
|
||||
format!("{}={}", NONCE_ATTR, nonce)
|
||||
}
|
||||
|
||||
pub async fn sasl_auth<T: AsRef<str>>(
|
||||
conn: &mut PgConnection,
|
||||
username: T,
|
||||
password: T,
|
||||
) -> Result<()> {
|
||||
// channel-binding = "c=" base64
|
||||
let channel_binding = format!("{}={}", CHANNEL_ATTR, base64::encode(GS2_HEADER));
|
||||
// "n=" saslname ;; Usernames are prepared using SASLprep.
|
||||
let username = format!("{}={}", USERNAME_ATTR, username.as_ref());
|
||||
// nonce = "r=" c-nonce [s-nonce] ;; Second part provided by server.
|
||||
let nonce = nonce();
|
||||
let client_first_message_bare =
|
||||
format!("{username},{nonce}", username = username, nonce = nonce);
|
||||
// client-first-message-bare = [reserved-mext ","] username "," nonce ["," extensions]
|
||||
let client_first_message = format!(
|
||||
"{gs2_header}{client_first_message_bare}",
|
||||
gs2_header = GS2_HEADER,
|
||||
client_first_message_bare = client_first_message_bare
|
||||
);
|
||||
|
||||
SaslInitialResponse {
|
||||
s: client_first_message,
|
||||
}
|
||||
.encode(conn.stream.buffer_mut());
|
||||
conn.stream.flush().await?;
|
||||
|
||||
let server_first_message = conn.receive().await?;
|
||||
|
||||
if let Some(Message::Authentication(auth)) = server_first_message {
|
||||
if let SaslContinue(sasl) = *auth {
|
||||
let server_first_message = sasl.data;
|
||||
|
||||
// SaltedPassword := Hi(Normalize(password), salt, i)
|
||||
let salted_password = hi(password.as_ref(), sasl.salt, sasl.iter_count);
|
||||
|
||||
// ClientKey := HMAC(SaltedPassword, "Client Key")
|
||||
let mut mac = Hmac::<Sha256>::new_varkey(&salted_password)
|
||||
.expect("HMAC can take key of any size");
|
||||
mac.input(b"Client Key");
|
||||
let client_key = mac.result().code();
|
||||
|
||||
// StoredKey := H(ClientKey)
|
||||
let mut hasher = Sha256::new();
|
||||
hasher.input(client_key);
|
||||
let stored_key = hasher.result();
|
||||
|
||||
// String::from_utf8_lossy should never fail because Postgres requires
|
||||
// the nonce to be all printable characters except ','
|
||||
let client_final_message_wo_proof = format!(
|
||||
"{channel_binding},r={nonce}",
|
||||
channel_binding = channel_binding,
|
||||
nonce = String::from_utf8_lossy(&sasl.nonce)
|
||||
);
|
||||
|
||||
// AuthMessage := client-first-message-bare + "," + server-first-message + "," + client-final-message-without-proof
|
||||
let auth_message = format!("{client_first_message_bare},{server_first_message},{client_final_message_wo_proof}",
|
||||
client_first_message_bare = client_first_message_bare,
|
||||
server_first_message = server_first_message,
|
||||
client_final_message_wo_proof = client_final_message_wo_proof);
|
||||
|
||||
// ClientSignature := HMAC(StoredKey, AuthMessage)
|
||||
let mut mac =
|
||||
Hmac::<Sha256>::new_varkey(&stored_key).expect("HMAC can take key of any size");
|
||||
mac.input(&auth_message.as_bytes());
|
||||
let client_signature = mac.result().code();
|
||||
|
||||
// ClientProof := ClientKey XOR ClientSignature
|
||||
let client_proof: Vec<u8> = client_key
|
||||
.iter()
|
||||
.zip(client_signature.iter())
|
||||
.map(|(&a, &b)| a ^ b)
|
||||
.collect();
|
||||
|
||||
// ServerKey := HMAC(SaltedPassword, "Server Key")
|
||||
let mut mac = Hmac::<Sha256>::new_varkey(&salted_password)
|
||||
.expect("HMAC can take key of any size");
|
||||
mac.input(b"Server Key");
|
||||
let server_key = mac.result().code();
|
||||
|
||||
// ServerSignature := HMAC(ServerKey, AuthMessage)
|
||||
let mut mac =
|
||||
Hmac::<Sha256>::new_varkey(&server_key).expect("HMAC can take key of any size");
|
||||
mac.input(&auth_message.as_bytes());
|
||||
let server_signature = mac.result().code();
|
||||
|
||||
// client-final-message = client-final-message-without-proof "," proof
|
||||
let client_final_message = format!(
|
||||
"{client_final_message_wo_proof},p={client_proof}",
|
||||
client_final_message_wo_proof = client_final_message_wo_proof,
|
||||
client_proof = base64::encode(&client_proof)
|
||||
);
|
||||
|
||||
SaslResponse {
|
||||
s: client_final_message,
|
||||
}
|
||||
.encode(conn.stream.buffer_mut());
|
||||
conn.stream.flush().await?;
|
||||
let server_final_response = conn.receive().await?;
|
||||
|
||||
Ok(())
|
||||
} else {
|
||||
Err(protocol_err!(
|
||||
"Expected Authentication::SaslContinue, but received {:?}",
|
||||
auth
|
||||
))?
|
||||
}
|
||||
} else {
|
||||
Err(protocol_err!(
|
||||
"Expected Message::Authentication, but received {:?}",
|
||||
server_first_message
|
||||
))?
|
||||
}
|
||||
}
|
||||
|
||||
// Hi(str, salt, i):
|
||||
pub fn hi<T: AsRef<str>>(s: T, salt: Vec<u8>, iter_count: u32) -> Vec<u8> {
|
||||
let mut mac =
|
||||
Hmac::<Sha256>::new_varkey(s.as_ref().as_bytes()).expect("HMAC can take key of any size");
|
||||
|
||||
mac.input(&salt);
|
||||
mac.input(&1u32.to_be_bytes());
|
||||
|
||||
let mut u = mac.result().code();
|
||||
let mut hi = u;
|
||||
|
||||
for _ in 1..iter_count {
|
||||
let mut mac = Hmac::<Sha256>::new_varkey(s.as_ref().as_bytes())
|
||||
.expect("HMAC can take key of any size");
|
||||
mac.input(u.as_slice());
|
||||
u = mac.result().code();
|
||||
hi = hi.iter().zip(u.iter()).map(|(&a, &b)| a ^ b).collect();
|
||||
}
|
||||
|
||||
hi.to_vec()
|
||||
}
|
||||
|
|
@ -14,29 +14,29 @@ async fn it_connects() -> anyhow::Result<()> {
|
|||
Ok(())
|
||||
}
|
||||
|
||||
#[async_std::test]
|
||||
async fn it_connects_to_database_user() -> anyhow::Result<()> {
|
||||
let mut conn = connect().await?;
|
||||
// #[async_std::test]
|
||||
// async fn it_connects_to_database_user() -> anyhow::Result<()> {
|
||||
// let mut conn = connect().await?;
|
||||
|
||||
let row = sqlx::query("select current_database()")
|
||||
.fetch_one(&mut conn)
|
||||
.await?;
|
||||
// let row = sqlx::query("select current_database()")
|
||||
// .fetch_one(&mut conn)
|
||||
// .await?;
|
||||
|
||||
let current_db: String = row.get(0);
|
||||
// let current_db: String = row.get(0);
|
||||
|
||||
let row = sqlx::query("select current_user")
|
||||
.fetch_one(&mut conn)
|
||||
.await?;
|
||||
// let row = sqlx::query("select current_user")
|
||||
// .fetch_one(&mut conn)
|
||||
// .await?;
|
||||
|
||||
let current_user: String = row.get(0);
|
||||
// let current_user: String = row.get(0);
|
||||
|
||||
assert_eq!(current_db, "postgres");
|
||||
assert_eq!(current_user, "postgres");
|
||||
// assert_eq!(current_db, "postgres");
|
||||
// assert_eq!(current_user, "postgres");
|
||||
|
||||
conn.close().await?;
|
||||
// conn.close().await?;
|
||||
|
||||
Ok(())
|
||||
}
|
||||
// Ok(())
|
||||
// }
|
||||
|
||||
#[async_std::test]
|
||||
async fn it_executes() -> anyhow::Result<()> {
|
||||
|
|
|
|||
Loading…
Reference in a new issue