架构师训练营第 11 周作业和感想

import os
from hashlib import sha256
from hmac import HMAC
import random
import string

'''返回一个set，第一个值是加密后字符串，第二个值是本次使用的盐值'''
def encrypt_password(username, password, salt=None):
    """Hash username + password + salt-value."""
    if salt is None:
        #salt = os.urandom(12) # 64 bits.
        salt_str = ''.join(random.sample(string.ascii_letters + string.digits, 12))
        print("saltstr= %s"% salt_str)
    else:
        assert isinstance(salt, str)
        print("saltstr= %s"% salt)
        salt_str = salt

    assert isinstance(username, str)
    assert isinstance(password, str)

#    print("salt= %s"%salt)
    #encrypt_result = sha256(salt_str + password + username).hexdigest()
    #使用username 盐值 密码 连成一个字符串，然后用sha256求其摘要形成存储在数据库的验证字符串
    mstr = username + salt_str + password
    encrypt_result = sha256(mstr.encode("utf-8")).hexdigest()
    print("encrypt_result = %s"% encrypt_result)
    return (encrypt_result,salt_str)

def arthorize_password(username, password, stored_hash_str):
    splitstr = stored_hash_str.split("*")
    stored_username = splitstr[0]
    stored_salt = splitstr[1]
    stored_encrypt_result = splitstr[2]
    #print("The split stored strings are: ",end="")
    #print(splitstr)
    
    mstr = username + stored_salt + password
    encrypt_result = sha256(mstr.encode("utf-8")).hexdigest()
    #print("encrypt_result = %s"% encrypt_result)
    
    return encrypt_result == stored_encrypt_result

#首先模拟将用户的秘钥加密的过程
username = "user1"
encrypted_str_set = encrypt_password(username, password="hello445tty")
encrypted_str = encrypted_str_set[0]
salt = encrypted_str_set[1]
#简单的一个存储示例，将用户名、盐值和摘要值用* 隔开，存储在一起
#由于需要先比较username取出相应的验证字符串，因此username需要单独存储为一个字段
stored_str = username + "*" + salt + "*" + encrypted_str
print("The stored string is:  %s" % stored_str)
print("###摘要字符串已经生成###\n\n")

#模拟一个输入密码并验证的过程
stored_username = username
username = "user1"
stored_encrypted_str = stored_str
'''
此处有从数据库中取出和username字符串相同值的stored_username的过程
'''
input_password = "hello445tty"
result = arthorize_password(username, input_password, stored_encrypted_str)
print("username: %s  passowrd: %s"% (username, input_password))
print("验证成功") if result else print("验证失败")

result = arthorize_password(username, "anoterpassword", stored_encrypted_str)
print("username: %s  passowrd: %s"% (username, "anoterpassword"))
print("验证成功") if result else print("验证失败")