DifferentDirection/Relay
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Password Hashing setup. Need server setups and decisions made about API to move forward more

Browse Source
This commit is contained in:
Cody Larkin
2026-03-13 20:53:14 -04:00
parent 7682ce0429
commit 08e9bf748f
12 changed files with 372 additions and 40 deletions
Download Patch File Download Diff File Expand all files Collapse all files

109
PasswordHasher.cs Normal file
View File

@@ -0,0 +1,109 @@
using System;
using System.Security.Cryptography;
using System.Text;
using Konscious.Security.Cryptography;
namespace PasswordHasher
{
/// <summary>
/// Provides secure password hashing functionality using Argon2id algorithm
/// </summary>
public class PasswordHasher
{
/// <summary>
/// Size of the salt in bytes
/// </summary>
private const int SaltSize = 16;
/// <summary>
/// Size of the hash in bytes
/// </summary>
private const int HashSize = 32;
/// <summary>
/// Number of threads to use for parallel computation
/// </summary>
private const int DegreeOfParallelism = 1;
/// <summary>
/// Number of iterations for the Argon2id algorithm
/// </summary>
private const int Iterations = 2;
/// <summary>
/// Memory size in KB to use
/// </summary>
private const int MemorySize = 19456; // 19 MB
/// <summary>
/// Generates a secure hash of a password using Argon2id with a random salt
/// </summary>
/// <param name="password">The plain text password to hash</param>
/// <returns>A Base64 string containing the combined salt and hash</returns>
/// <exception cref="ArgumentNullException">Thrown when password is null</exception>
public string HashPassword(string password)
{
// Generate a random salt
byte[] salt = new byte[SaltSize];
using (RandomNumberGenerator rng = RandomNumberGenerator.Create())
{
rng.GetBytes(salt);
}
// Create hash
byte[] hash = HashPassword(password, salt);
// Combine salt and hash
var combinedBytes = new byte[salt.Length + hash.Length];
Array.Copy(salt, 0, combinedBytes, 0, salt.Length);
Array.Copy(hash, 0, combinedBytes, salt.Length, hash.Length);
// Convert to base64 for storage
return Convert.ToBase64String(combinedBytes);
}
/// <summary>
/// Generates a password hash using Argon2id with a specific salt
/// </summary>
/// <param name="password">The plain text password</param>
/// <param name="salt">The salt to use for hashing</param>
/// <returns>A byte array containing the password hash</returns>
private byte[] HashPassword(string password, byte[] salt)
{
var argon2 = new Argon2id(Encoding.UTF8.GetBytes(password))
{
Salt = salt,
DegreeOfParallelism = DegreeOfParallelism,
Iterations = Iterations,
MemorySize = MemorySize
};
return argon2.GetBytes(HashSize);
}
/// <summary>
/// Verifies if a password matches a stored hash
/// </summary>
/// <param name="password">The plain text password to verify</param>
/// <param name="hashedPassword">The stored hash in Base64 format</param>
/// <returns>True if the password matches the hash, false otherwise</returns>
/// <exception cref="ArgumentNullException">Thrown when password or hashedPassword are null</exception>
/// <exception cref="FormatException">Thrown when hashedPassword is not in valid Base64 format</exception>
public bool VerifyPassword(string password, string hashedPassword)
{
// Decode the stored hash
byte[] combinedBytes = Convert.FromBase64String(hashedPassword);
// Extract salt and hash
byte[] salt = new byte[SaltSize];
byte[] hash = new byte[HashSize];
Array.Copy(combinedBytes, 0, salt, 0, SaltSize);
Array.Copy(combinedBytes, SaltSize, hash, 0, HashSize);
// Compute hash for the input password
byte[] newHash = HashPassword(password, salt);
// Compare the hashes
return CryptographicOperations.FixedTimeEquals(hash, newHash);
}
}
}

178
Program.cs
View File

@@ -1,57 +1,60 @@
using SurrealDb.Net;
using System.ComponentModel.Design;
using SurrealDb.Net;
using SurrealDb.Net.Models;
using SurrealDb.Net.Models.Auth;
using System.Text.Json;
const string TABLE = "person";
using PasswordHasher;
using var db = new SurrealDbClient("ws://127.0.0.1:8000/rpc");
await db.SignIn(new RootAuth { Username = "root", Password = "secret" });
await db.Use("test", "test");
var user = new Users
{
Username = "Keeper317",
Email = "Keeper317@gmail.com",
CreatedAt = DateTime.Now,
UpdatedAt = DateTime.Now,
LastLogin = DateTime.Now,
TwoFactorEnabled = false,
EmailVerified = false,
AccountStatus = (int) AccountStatuses.Active,
OnlineStatus = (int) OnlineStatuses.Online,
};
var created = await db.Create("users", user);
Console.WriteLine($"Created Person: {ToJsonString(created)}");
var hasher = new PasswordHasher.PasswordHasher();
user.Password = hasher.HashPassword(created.Id + "password");
user.UpdatedAt = DateTime.Now;
user.LastLogin = DateTime.Now;
user.Id = created.Id;
bool isValid = hasher.VerifyPassword(created.Id + "password", user.Password);
Console.WriteLine($"Password match: {isValid}");
var updated = await db.Merge<PasswordHash, Users>("users", new() { Id = created.Id, Password = user.Password });
// var person = new Person
// {
// Title = "Founder CEO",
// Name = new() { FirstName = "Tobie", LastName = "Morgan Hitchcock" },
// Marketing = true
// };
// var created = await db.Create(TABLE, person);
// Console.WriteLine($"Created Person: {ToJsonString(created)}");
//
// var updated = await db.Merge<ResponsibilityMerge, Person>(
// new() { Id = (TABLE, "3bi2i54plwqfqe8u2qiq"), Marketing = false }
// new() { Id = (TABLE, "8b4nwczy6x8f8zd5sslq"), Marketing = true }
// );
// Console.WriteLine($"Updated Person: {ToJsonString(updated)}");
Console.WriteLine($"Updated Person: {ToJsonString(updated)}");
//
// var people = await db.Select<Person>(TABLE);
// Console.WriteLine($"Select Person: {ToJsonString(people)}");
var queryResponse = await db.Query(
$"SELECT Marketing, count() AS Count FROM type::table({TABLE}) GROUP BY Marketing"
);
// await db.Delete(TABLE);
var people = await db.Select<Users>("users");
Console.WriteLine($"Select Person: {ToJsonString(people)}");
//
// var queryResponse = await db.Query($"SELECT Marketing, count() AS Count FROM type::table({TABLE}) GROUP BY Marketing");
// var groups = queryResponse.GetValue<List<Group>>(0);
Console.WriteLine($"Get Value as group: {ToJsonString(queryResponse)}");
// Console.WriteLine($"Get Value as group: {ToJsonString(groups)}");
await db.Delete("users");
static string ToJsonString(object? o)
{
return JsonSerializer.Serialize(o, new JsonSerializerOptions { WriteIndented = true, });
}
public class Person : Record
{
public string? Title { get; set; }
public Name? Name { get; set; }
public bool Marketing { get; set; }
}
public class Name
{
public string? FirstName { get; set; }
public string? LastName { get; set; }
}
public class ResponsibilityMerge : Record
{
public bool Marketing { get; set; }
@@ -61,3 +64,110 @@ public class Group
public bool Marketing { get; set; }
public int Count { get; set; }
}
public class Users : Record
{
public required string Username { get; set; }
public string? Password { get; set; }
public required string Email { get; set; }
public required DateTime CreatedAt { get; set; }
public required DateTime UpdatedAt { get; set; }
public required DateTime LastLogin { get; set; }
public bool TwoFactorEnabled { get; set; }
public bool EmailVerified { get; set; }
public required int AccountStatus { get; set; }
public required int OnlineStatus { get; set; }
}
public class PasswordHash : Record
{
public string? Password { get; set; }
}
public class Sessions : Record
{
public required string UserId { get; set; }
public required string TokenHash { get; set; }
public required DateTime IssuedAt { get; set; }
public required DateTime ExpiresAt { get; set; }
public DateTime? LastUsedAt { get; set; }
public bool Revoked { get; set; }
public required string DeviceName { get; set; }
public required string IpAddress { get; set; }
public required string UserAgent { get; set; }
}
public class PasswordReset : Record
{
public required string UserId { get; set; }
public required string TokenHash { get; set; }
public required DateTime CreatedAt { get; set; }
public required DateTime ExpiresAt { get; set; }
public bool Revoked { get; set; }
}
public class Licenses : Record
{
public required string UserId { get; set; }
public required int LicenseType { get; set; }
public required int Status { get; set; }
public required DateTime CreatedAt { get; set; }
public required DateTime StartsAt { get; set; }
public required DateTime UpdatedAt { get; set; }
public required DateTime ExpiresAt { get; set; }
}
public class AuthAudits : Record
{
public required string UserId { get; set; }
public required int EventType { get; set; }
public bool Success { get; set; }
public required string IpAddress { get; set; }
public required string UserAgent { get; set; }
public required string Details { get; set; }
public required DateTime CreatedAt { get; set; }
}
enum AccountStatuses
{
Active,
Suspended,
Banned,
Deleted
}
enum OnlineStatuses
{
Online,
Busy,
DND,
Invisible,
Offline
}
enum LicenseStatuses
{
Active,
Expired,
Renewable,
Revoked
}
enum LicenseType
{
Free,
Basic,
Advanced,
Pro,
Enterprise
}
enum LogEvents
{
LoginSuccess,
LoginFailure,
LogoutSuccess,
LogoutFailure,
PasswordResetSuccess,
PasswordResetFailure,
}

1
RelayCore.csproj
View File

@@ -9,6 +9,7 @@
</PropertyGroup>
<ItemGroup>
<PackageReference Include="Konscious.Security.Cryptography.Argon2" Version="1.3.1" />
<PackageReference Include="SurrealDb.Net" Version="0.9.0" />
</ItemGroup>

2
obj/Debug/net9.0/RelayCore.AssemblyInfo.cs
View File

@@ -13,7 +13,7 @@ using System.Reflection;
[assembly: System.Reflection.AssemblyCompanyAttribute("RelayCore")]
[assembly: System.Reflection.AssemblyConfigurationAttribute("Debug")]
[assembly: System.Reflection.AssemblyFileVersionAttribute("1.0.0.0")]
[assembly: System.Reflection.AssemblyInformationalVersionAttribute("1.0.0+ccbb3e874a5d2b1d5f9bc39960c235c07b5fe29d")]
[assembly: System.Reflection.AssemblyInformationalVersionAttribute("1.0.0+7682ce0429634f5b008d85c59acf4ed3838121ef")]
[assembly: System.Reflection.AssemblyProductAttribute("RelayCore")]
[assembly: System.Reflection.AssemblyTitleAttribute("RelayCore")]
[assembly: System.Reflection.AssemblyVersionAttribute("1.0.0.0")]

2
obj/Debug/net9.0/RelayCore.AssemblyInfoInputs.cache
View File

@@ -1 +1 @@
4f5764b42df7cbe872550eb268495ab3739cb29ded503ffcfb83b6b63bb3a5ea
86555fdeb5734425e2303585c6b325bb51b77f8679eb62d09e5e490545061734

BIN
obj/Debug/net9.0/RelayCore.assets.cache
View File

Binary file not shown.

4
obj/RelayCore.csproj.nuget.dgspec.json
View File

@@ -51,6 +51,10 @@
"net9.0": {
"targetAlias": "net9.0",
"dependencies": {
"Konscious.Security.Cryptography.Argon2": {
"target": "Package",
"version": "[1.3.1, )"
},
"SurrealDb.Net": {
"target": "Package",
"version": "[0.9.0, )"

105
obj/project.assets.json
View File

@@ -27,6 +27,36 @@
"lib/net8.0/Dahomey.Cbor.dll": {}
}
},
"Konscious.Security.Cryptography.Argon2/1.3.1": {
"type": "package",
"dependencies": {
"Konscious.Security.Cryptography.Blake2": "1.1.1",
"System.Memory": "4.5.4"
},
"compile": {
"lib/net8.0/Konscious.Security.Cryptography.Argon2.dll": {
"related": ".xml"
}
},
"runtime": {
"lib/net8.0/Konscious.Security.Cryptography.Argon2.dll": {
"related": ".xml"
}
}
},
"Konscious.Security.Cryptography.Blake2/1.1.1": {
"type": "package",
"compile": {
"lib/net8.0/Konscious.Security.Cryptography.Blake2.dll": {
"related": ".xml"
}
},
"runtime": {
"lib/net8.0/Konscious.Security.Cryptography.Blake2.dll": {
"related": ".xml"
}
}
},
"Microsoft.Bcl.AsyncInterfaces/6.0.0": {
"type": "package",
"compile": {
@@ -412,6 +442,15 @@
}
}
},
"System.Memory/4.5.4": {
"type": "package",
"compile": {
"ref/netcoreapp2.1/_._": {}
},
"runtime": {
"lib/netcoreapp2.1/_._": {}
}
},
"System.Reactive/6.0.0": {
"type": "package",
"compile": {
@@ -511,6 +550,44 @@
"lib/netstandard2.0/Dahomey.Cbor.dll"
]
},
"Konscious.Security.Cryptography.Argon2/1.3.1": {
"sha512": "T+OAGwzYYXftahpOxO7J4xA5K6urxwGnWQf3M+Jpi+76Azv/0T3M5SuN+h7/QvXuiqNw3ZEZ5QqVLI5ygDAylw==",
"type": "package",
"path": "konscious.security.cryptography.argon2/1.3.1",
"files": [
".nupkg.metadata",
".signature.p7s",
"konscious.security.cryptography.argon2.1.3.1.nupkg.sha512",
"konscious.security.cryptography.argon2.nuspec",
"lib/net46/Konscious.Security.Cryptography.Argon2.dll",
"lib/net46/Konscious.Security.Cryptography.Argon2.xml",
"lib/net6.0/Konscious.Security.Cryptography.Argon2.dll",
"lib/net6.0/Konscious.Security.Cryptography.Argon2.xml",
"lib/net8.0/Konscious.Security.Cryptography.Argon2.dll",
"lib/net8.0/Konscious.Security.Cryptography.Argon2.xml",
"lib/netstandard1.3/Konscious.Security.Cryptography.Argon2.dll",
"lib/netstandard1.3/Konscious.Security.Cryptography.Argon2.xml"
]
},
"Konscious.Security.Cryptography.Blake2/1.1.1": {
"sha512": "odwOyzj/J/lHJZNwFWJGU/LRecBShupAJ2S8TQqZfhUe9niHzu/voBYK5wuVKsvSpzbfupKQYZguVyIk1sgOkQ==",
"type": "package",
"path": "konscious.security.cryptography.blake2/1.1.1",
"files": [
".nupkg.metadata",
".signature.p7s",
"konscious.security.cryptography.blake2.1.1.1.nupkg.sha512",
"konscious.security.cryptography.blake2.nuspec",
"lib/net46/Konscious.Security.Cryptography.Blake2.dll",
"lib/net46/Konscious.Security.Cryptography.Blake2.xml",
"lib/net6.0/Konscious.Security.Cryptography.Blake2.dll",
"lib/net6.0/Konscious.Security.Cryptography.Blake2.xml",
"lib/net8.0/Konscious.Security.Cryptography.Blake2.dll",
"lib/net8.0/Konscious.Security.Cryptography.Blake2.xml",
"lib/netstandard1.3/Konscious.Security.Cryptography.Blake2.dll",
"lib/netstandard1.3/Konscious.Security.Cryptography.Blake2.xml"
]
},
"Microsoft.Bcl.AsyncInterfaces/6.0.0": {
"sha512": "UcSjPsst+DfAdJGVDsu346FX0ci0ah+lw3WRtn18NUwEqRt70HaOQ7lI72vy3+1LxtqI3T5GWwV39rQSrCzAeg==",
"type": "package",
@@ -1131,6 +1208,29 @@
"system.linq.async.nuspec"
]
},
"System.Memory/4.5.4": {
"sha512": "1MbJTHS1lZ4bS4FmsJjnuGJOu88ZzTT2rLvrhW7Ygic+pC0NWA+3hgAen0HRdsocuQXCkUTdFn9yHJJhsijDXw==",
"type": "package",
"path": "system.memory/4.5.4",
"files": [
".nupkg.metadata",
".signature.p7s",
"LICENSE.TXT",
"THIRD-PARTY-NOTICES.TXT",
"lib/net461/System.Memory.dll",
"lib/net461/System.Memory.xml",
"lib/netcoreapp2.1/_._",
"lib/netstandard1.1/System.Memory.dll",
"lib/netstandard1.1/System.Memory.xml",
"lib/netstandard2.0/System.Memory.dll",
"lib/netstandard2.0/System.Memory.xml",
"ref/netcoreapp2.1/_._",
"system.memory.4.5.4.nupkg.sha512",
"system.memory.nuspec",
"useSharedDesignerContext.txt",
"version.txt"
]
},
"System.Reactive/6.0.0": {
"sha512": "31kfaW4ZupZzPsI5PVe77VhnvFF55qgma7KZr/E0iFTs6fmdhhG8j0mgEx620iLTey1EynOkEfnyTjtNEpJzGw==",
"type": "package",
@@ -1239,6 +1339,7 @@
},
"projectFileDependencyGroups": {
"net9.0": [
"Konscious.Security.Cryptography.Argon2 >= 1.3.1",
"SurrealDb.Net >= 0.9.0"
]
},
@@ -1293,6 +1394,10 @@
"net9.0": {
"targetAlias": "net9.0",
"dependencies": {
"Konscious.Security.Cryptography.Argon2": {
"target": "Package",
"version": "[1.3.1, )"
},
"SurrealDb.Net": {
"target": "Package",
"version": "[0.9.0, )"

5
obj/project.nuget.cache
View File

@@ -1,11 +1,13 @@
{
"version": 2,
"dgSpecHash": "FgXgk22yPWQ=",
"dgSpecHash": "hVKcd/jquSo=",
"success": true,
"projectFilePath": "D:\\DDI\\Relay\\RelayChat\\RelayCore\\RelayCore.csproj",
"expectedPackageFiles": [
"C:\\Users\\Core\\.nuget\\packages\\concurrenthashset\\1.3.0\\concurrenthashset.1.3.0.nupkg.sha512",
"C:\\Users\\Core\\.nuget\\packages\\dahomey.cbor\\1.24.3\\dahomey.cbor.1.24.3.nupkg.sha512",
"C:\\Users\\Core\\.nuget\\packages\\konscious.security.cryptography.argon2\\1.3.1\\konscious.security.cryptography.argon2.1.3.1.nupkg.sha512",
"C:\\Users\\Core\\.nuget\\packages\\konscious.security.cryptography.blake2\\1.1.1\\konscious.security.cryptography.blake2.1.1.1.nupkg.sha512",
"C:\\Users\\Core\\.nuget\\packages\\microsoft.bcl.asyncinterfaces\\6.0.0\\microsoft.bcl.asyncinterfaces.6.0.0.nupkg.sha512",
"C:\\Users\\Core\\.nuget\\packages\\microsoft.extensions.configuration\\9.0.4\\microsoft.extensions.configuration.9.0.4.nupkg.sha512",
"C:\\Users\\Core\\.nuget\\packages\\microsoft.extensions.configuration.abstractions\\9.0.4\\microsoft.extensions.configuration.abstractions.9.0.4.nupkg.sha512",
@@ -27,6 +29,7 @@
"C:\\Users\\Core\\.nuget\\packages\\system.collections.immutable\\9.0.4\\system.collections.immutable.9.0.4.nupkg.sha512",
"C:\\Users\\Core\\.nuget\\packages\\system.io.pipelines\\7.0.0\\system.io.pipelines.7.0.0.nupkg.sha512",
"C:\\Users\\Core\\.nuget\\packages\\system.linq.async\\6.0.1\\system.linq.async.6.0.1.nupkg.sha512",
"C:\\Users\\Core\\.nuget\\packages\\system.memory\\4.5.4\\system.memory.4.5.4.nupkg.sha512",
"C:\\Users\\Core\\.nuget\\packages\\system.reactive\\6.0.0\\system.reactive.6.0.0.nupkg.sha512",
"C:\\Users\\Core\\.nuget\\packages\\system.threading.channels\\8.0.0\\system.threading.channels.8.0.0.nupkg.sha512",
"C:\\Users\\Core\\.nuget\\packages\\systemtextjsonpatch\\4.2.0\\systemtextjsonpatch.4.2.0.nupkg.sha512",

2
obj/project.packagespec.json
View File

@@ -1 +1 @@
"restore":{"projectUniqueName":"D:\\DDI\\Relay\\RelayChat\\RelayCore\\RelayCore.csproj","projectName":"RelayCore","projectPath":"D:\\DDI\\Relay\\RelayChat\\RelayCore\\RelayCore.csproj","outputPath":"D:\\DDI\\Relay\\RelayChat\\RelayCore\\obj\\","projectStyle":"PackageReference","fallbackFolders":["C:\\Program Files (x86)\\Microsoft Visual Studio\\Shared\\NuGetPackages"],"originalTargetFrameworks":["net9.0"],"sources":{"C:\\Program Files (x86)\\Microsoft SDKs\\NuGetPackages\\":{},"C:\\Program Files\\dotnet\\library-packs":{},"https://api.nuget.org/v3/index.json":{}},"frameworks":{"net9.0":{"targetAlias":"net9.0","projectReferences":{}}},"warningProperties":{"warnAsError":["NU1605"]},"restoreAuditProperties":{"enableAudit":"true","auditLevel":"low","auditMode":"direct"},"SdkAnalysisLevel":"9.0.300"}"frameworks":{"net9.0":{"targetAlias":"net9.0","dependencies":{"SurrealDb.Net":{"target":"Package","version":"[0.9.0, )"}},"imports":["net461","net462","net47","net471","net472","net48","net481"],"assetTargetFallback":true,"warn":true,"frameworkReferences":{"Microsoft.NETCore.App":{"privateAssets":"all"}},"runtimeIdentifierGraphPath":"C:\\Program Files\\dotnet\\sdk\\9.0.305/PortableRuntimeIdentifierGraph.json"}}
"restore":{"projectUniqueName":"D:\\DDI\\Relay\\RelayChat\\RelayCore\\RelayCore.csproj","projectName":"RelayCore","projectPath":"D:\\DDI\\Relay\\RelayChat\\RelayCore\\RelayCore.csproj","outputPath":"D:\\DDI\\Relay\\RelayChat\\RelayCore\\obj\\","projectStyle":"PackageReference","fallbackFolders":["C:\\Program Files (x86)\\Microsoft Visual Studio\\Shared\\NuGetPackages"],"originalTargetFrameworks":["net9.0"],"sources":{"C:\\Program Files (x86)\\Microsoft SDKs\\NuGetPackages\\":{},"C:\\Program Files\\dotnet\\library-packs":{},"https://api.nuget.org/v3/index.json":{}},"frameworks":{"net9.0":{"targetAlias":"net9.0","projectReferences":{}}},"warningProperties":{"warnAsError":["NU1605"]},"restoreAuditProperties":{"enableAudit":"true","auditLevel":"low","auditMode":"direct"},"SdkAnalysisLevel":"9.0.300"}"frameworks":{"net9.0":{"targetAlias":"net9.0","dependencies":{"Konscious.Security.Cryptography.Argon2":{"target":"Package","version":"[1.3.1, )"},"SurrealDb.Net":{"target":"Package","version":"[0.9.0, )"}},"imports":["net461","net462","net47","net471","net472","net48","net481"],"assetTargetFallback":true,"warn":true,"frameworkReferences":{"Microsoft.NETCore.App":{"privateAssets":"all"}},"runtimeIdentifierGraphPath":"C:\\Program Files\\dotnet\\sdk\\9.0.305/PortableRuntimeIdentifierGraph.json"}}

2
obj/rider.project.model.nuget.info
View File

@@ -1 +1 @@
17731137598642406
17734474740469652

2
obj/rider.project.restore.info
View File

@@ -1 +1 @@
17731190668997575
17734474749787742