Changeset 251 in code

Timestamp:

Apr 10, 2020, 8:09:02 AM (5 years ago)

Author:

admin

Message:

Add ability to change password

Location:

trunk

Files:

• cmd/sojuctl/main.go (modified) (2 diffs)
• db.go (modified) (1 diff)

trunk/cmd/sojuctl/main.go

@@ -15 +15 @@
 const usage = `usage: sojuctl [-config path] <action> [options...]
 
-  create-user <username>  Create a new user
-  help                    Show this help message
+  create-user <username>        Create a new user
+  change-password <username>    Change password for a user
+  help                          Show this help message
 `
 
@@ -73 +74 @@
                         log.Fatalf("failed to create user: %v", err)
                 }
+        case "change-password":
+                username := flag.Arg(1)
+                if username == "" {
+                        flag.Usage()
+                        os.Exit(1)
+                }
+
+                fmt.Printf("New password: ")
+                password, err := terminal.ReadPassword(int(os.Stdin.Fd()))
+                if err != nil {
+                        log.Fatalf("failed to read new password: %v", err)
+                }
+                fmt.Printf("\n")
+
+                hashed, err := bcrypt.GenerateFromPassword(password, bcrypt.DefaultCost)
+                if err != nil {
+                        log.Fatalf("failed to hash password: %v", err)
+                }
+
+                user := soju.User{
+                        Username: username,
+                        Password: string(hashed),
+                }
+                if err := db.UpdatePassword(&user); err != nil {
+                        log.Fatalf("failed to update password: %v", err)
+                }
+
         default:
                 flag.Usage()

trunk/db.go

@@ -130 +130 @@
         password := toStringPtr(user.Password)
         _, err := db.db.Exec("INSERT INTO User(username, password) VALUES (?, ?)", user.Username, password)
+        return err
+}
+
+func (db *DB) UpdatePassword(user *User) error {
+        db.lock.Lock()
+        defer db.lock.Unlock()
+
+        password := toStringPtr(user.Password)
+        _, err := db.db.Exec(`UPDATE User
+        SET password = ?
+        WHERE username = ?`,
+                password, user.Username)
         return err
 }