Changeset 1737 for trunk/sources/HeuristicLab.Security.Core/3.2/PermissionManager.cs

Timestamp:

05/04/09 19:42:18 (15 years ago)

Author:

svonolfe

Message:

Passwords are now stored in MD5 in the database (#532)

File:

• trunk/sources/HeuristicLab.Security.Core/3.2/PermissionManager.cs (modified) (4 diffs)

trunk/sources/HeuristicLab.Security.Core/3.2/PermissionManager.cs

@@ -8 +8 @@
 using HeuristicLab.DataAccess.Interfaces;
 using HeuristicLab.PluginInfrastructure;
+using System.Security.Cryptography;
 
 namespace HeuristicLab.Security.Core {
@@ -19 +20 @@
     Object locker = new Object();
 
- 
+    private static string getMd5Hash(string input) {
+      // Create a new instance of the MD5CryptoServiceProvider object.
+      MD5 md5Hasher = MD5.Create();
+
+      // Convert the input string to a byte array and compute the hash.
+      byte[] data = md5Hasher.ComputeHash(Encoding.Default.GetBytes(input));
+
+      // Create a new Stringbuilder to collect the bytes
+      // and create a string.
+      StringBuilder sBuilder = new StringBuilder();
+
+      // Loop through each byte of the hashed data 
+      // and format each one as a hexadecimal string.
+      for (int i = 0; i < data.Length; i++) {
+        sBuilder.Append(data[i].ToString("x2"));
+      }
+
+      // Return the hexadecimal string.
+      return sBuilder.ToString();
+    }
+
    /// <summary>
    /// If a session exists for this userName then it is returned, otherwise the given password
@@ -34 +55 @@
         session = factory.GetSessionForCurrentThread();
 
+        password = getMd5Hash(password);
+
         IUserAdapter userAdapter = session.GetDataAdapter<User, IUserAdapter>();
         User user = userAdapter.GetByLogin(userName);
 
-        if (user.Password.CompareTo(password) == 0) {
+        if (user != null && 
+            user.Password.Equals(password)) {
           Guid newSessionId = Guid.NewGuid();
           lock (locker)
@@ -105 +129 @@
       return Guid.Empty;
     }
-
-    public void TestServer() {
-    }
   } 
 }