credentialpassword.h

/*
 * SPDX-FileCopyrightText: (C) 2013-2023 Daniel Nicoletti <dantti12@gmail.com>
 * SPDX-License-Identifier: BSD-3-Clause
 */
#pragma once

#include <Cutelyst/Plugins/Authentication/authentication.h>
#include <Cutelyst/cutelyst_global.h>

#include <QtCore/QCryptographicHash>

namespace Cutelyst {

class CredentialPasswordPrivate;

class CUTELYST_PLUGIN_AUTHENTICATION_EXPORT CredentialPassword : public AuthenticationCredential
{
    Q_OBJECT
    Q_DECLARE_PRIVATE(CredentialPassword)
public:
    enum PasswordType {
        None,  
        Clear, 
        Hashed 
    };
    Q_ENUM(PasswordType)

    
    explicit CredentialPassword(QObject *parent = nullptr);

    virtual ~CredentialPassword() override;

    [[nodiscard]] AuthenticationUser
        authenticate(Context *c, AuthenticationRealm *realm, const ParamsMultiMap &authinfo) final;

    [[nodiscard]] QString passwordField() const;

    void setPasswordField(const QString &fieldName);

    [[nodiscard]] PasswordType passwordType() const;

    void setPasswordType(PasswordType type);

    [[nodiscard]] QString passwordPreSalt() const;

    void setPasswordPreSalt(const QString &passwordPreSalt);

    [[nodiscard]] QString passwordPostSalt() const;

    void setPasswordPostSalt(const QString &passwordPostSalt);

    [[nodiscard]] static bool validatePassword(const QByteArray &password,
                                               const QByteArray &correctHash);

    [[nodiscard]] static bool validatePassword(const QString &password, const QString &correctHash);

    [[nodiscard]] static QByteArray createPassword(const QByteArray &password,
                                                   QCryptographicHash::Algorithm method,
                                                   int iterations,
                                                   int saltByteSize,
                                                   int hashByteSize);

    [[nodiscard]] static QByteArray createPassword(const QByteArray &password);

    [[nodiscard]] inline static QString createPassword(const QString &password);

    [[nodiscard]] static QByteArray pbkdf2(QCryptographicHash::Algorithm method,
                                           const QByteArray &password,
                                           const QByteArray &salt,
                                           int rounds,
                                           int keyLength);

    [[nodiscard]] static QByteArray hmac(QCryptographicHash::Algorithm method,
                                         const QByteArray &key,
                                         const QByteArray &message);

protected:
    CredentialPasswordPrivate *d_ptr;
};

inline bool CredentialPassword::validatePassword(const QString &password,
                                                 const QString &correctHash)
{
    return validatePassword(password.toUtf8(), correctHash.toLatin1());
}

QString CredentialPassword::createPassword(const QString &password)
{
    return QString::fromLatin1(createPassword(password.toUtf8()));
}

} // namespace Cutelyst