28 lines
912 B
Go
28 lines
912 B
Go
package basic
|
|
|
|
import (
|
|
"fmt"
|
|
)
|
|
|
|
type plainPassword struct {
|
|
password string
|
|
}
|
|
|
|
// Accept any password in the plain text encoding.
|
|
// Be careful: This matches any line, so it *must* be the last parser in you list.
|
|
func AcceptPlain(pw string) (EncodedPasswd, error) {
|
|
return &plainPassword{pw}, nil
|
|
}
|
|
|
|
// Reject any plain text encoded passoword.
|
|
// Be careful: This matches any line, so it *must* be the last parser in you list.
|
|
func RejectPlain(pw string) (EncodedPasswd, error) {
|
|
return nil, fmt.Errorf("plain password rejected: %s", pw)
|
|
}
|
|
|
|
func (p *plainPassword) MatchesPassword(pw string) bool {
|
|
// Notice: nginx prefixes plain passwords with {PLAIN}, so we see if that would
|
|
// let us match too. I'd split {PLAIN} off, but someone probably uses that
|
|
// in their password. It's a big planet.
|
|
return constantTimeEquals(pw, p.password) || constantTimeEquals("{PLAIN}"+pw, p.password)
|
|
}
|