54 lines
1.3 KiB
Python
54 lines
1.3 KiB
Python
# Copyright (c) 2025 Patrick Motsch
|
|
# All rights reserved.
|
|
"""
|
|
Password utility functions for secure password handling.
|
|
Uses Argon2 for password hashing.
|
|
"""
|
|
|
|
from typing import Optional
|
|
from passlib.context import CryptContext
|
|
|
|
# Password hashing context using Argon2
|
|
_pwdContext = CryptContext(schemes=["argon2"], deprecated="auto")
|
|
|
|
|
|
def hashPassword(password: str) -> str:
|
|
"""
|
|
Hash a password using Argon2.
|
|
|
|
Args:
|
|
password: Plain text password to hash
|
|
|
|
Returns:
|
|
Hashed password string
|
|
"""
|
|
return _pwdContext.hash(password)
|
|
|
|
|
|
def verifyPassword(plainPassword: str, hashedPassword: str) -> bool:
|
|
"""
|
|
Verify a plain password against a hashed password.
|
|
|
|
Args:
|
|
plainPassword: Plain text password to verify
|
|
hashedPassword: Hashed password to compare against
|
|
|
|
Returns:
|
|
True if password matches, False otherwise
|
|
"""
|
|
return _pwdContext.verify(plainPassword, hashedPassword)
|
|
|
|
|
|
def getPasswordHash(password: Optional[str]) -> Optional[str]:
|
|
"""
|
|
Hash a password, returning None if password is None.
|
|
|
|
Args:
|
|
password: Plain text password or None
|
|
|
|
Returns:
|
|
Hashed password or None if input was None
|
|
"""
|
|
if password is None:
|
|
return None
|
|
return _pwdContext.hash(password)
|