AshAuthentication.BcryptProvider (ash_authentication v4.9.6)

Provides the default implementation of AshAuthentication.HashProvider using Bcrypt.

Summary

hash(input)

Given some user input as a string, convert it into it's hashed form using Bcrypt.

simulate()

Simulate a password check to help avoid timing attacks.

Check if the user input matches the hash.

@spec hash(String.t()) :: {:ok, String.t()} | :error

Given some user input as a string, convert it into it's hashed form using Bcrypt.

iex> {:ok, hashed} = hash("Marty McFly")
...> String.starts_with?(hashed, "$2b$04$")
true

@spec simulate() :: false

Simulate a password check to help avoid timing attacks.

iex> simulate()
false

@spec valid?(input :: String.t() | nil, hash :: String.t()) :: boolean()

Check if the user input matches the hash.

iex> valid?("Marty McFly", "$2b$04$qgacrnrAJz8aPwaVQiGJn.PvryldV.NfOSYYvF/CZAGgMvvzhIE7S")
true