doido-model 0.1.0

SeaORM re-exports plus connection pooling and model testing helpers for Doido apps.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57

use doido_model::password::{
    generate_token, hash_password, hash_password_with_cost, verify_password, HasSecurePassword,
};

// Low bcrypt cost keeps the test fast; production uses hash_password (DEFAULT_COST).
const TEST_COST: u32 = 4;

#[test]
fn hash_password_uses_default_cost() {
    let digest = hash_password("secret").unwrap();
    assert!(verify_password("secret", &digest));
}

#[test]
fn verify_password_rejects_malformed_digest() {
    assert!(!verify_password("secret", "not-a-bcrypt-digest"));
}

#[test]
fn hashing_produces_a_verifiable_non_plaintext_digest() {
    let digest = hash_password_with_cost("s3cret", TEST_COST).unwrap();
    assert_ne!(digest, "s3cret", "the password is not stored in plaintext");
    assert!(
        verify_password("s3cret", &digest),
        "correct password verifies"
    );
    assert!(
        !verify_password("wrong", &digest),
        "wrong password is rejected"
    );
}

struct User {
    password_digest: String,
}
impl HasSecurePassword for User {
    fn password_digest(&self) -> &str {
        &self.password_digest
    }
}

#[test]
fn authenticate_checks_the_digest() {
    let user = User {
        password_digest: hash_password_with_cost("hunter2", TEST_COST).unwrap(),
    };
    assert!(user.authenticate("hunter2"));
    assert!(!user.authenticate("nope"));
}

#[test]
fn generated_tokens_are_nonempty_and_unique() {
    let a = generate_token();
    let b = generate_token();
    assert!(!a.is_empty());
    assert_ne!(a, b);
}