hippox-drivers 0.3.3

🦛All indivisible atomic driver units in Hippox.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125

//! Password verification skill

use super::common::{argon2_verify, bcrypt_verify};
use crate::DriverCallback;
use crate::DriverContext;
use crate::types::{Driver, DriverParameter};
use anyhow::Result;
use serde_json::{Value, json};
use std::collections::HashMap;

/// Driver for verifying passwords
///
/// # Description
/// Verifies a password against a stored hash.
///
/// # Parameters
/// * `password` (required) - Password to verify
/// * `hash` (required) - Stored password hash
///
/// # Example
/// ```
/// Input: password="MySecureP@ssw0rd", hash="$2b$12$..."
/// Output: "Password matches"
/// ```
#[derive(Debug)]
pub struct PasswordVerifyDriver;

#[async_trait::async_trait]
impl Driver for PasswordVerifyDriver {
    fn name(&self) -> &str {
        "password_verify"
    }

    fn description(&self) -> &str {
        "Verify a password against a stored hash"
    }

    fn usage_hint(&self) -> &str {
        "Use this skill to verify passwords during authentication. Supports bcrypt and Argon2id hashes."
    }

    fn parameters(&self) -> Vec<DriverParameter> {
        vec![
            DriverParameter {
                name: "password".to_string(),
                param_type: "string".to_string(),
                description: "Password to verify".to_string(),
                required: true,
                default: None,
                example: Some(Value::String("MySecureP@ssw0rd".to_string())),
                enum_values: None,
            },
            DriverParameter {
                name: "hash".to_string(),
                param_type: "string".to_string(),
                description: "Stored password hash".to_string(),
                required: true,
                default: None,
                example: Some(Value::String("$2b$12$abc123def456...".to_string())),
                enum_values: None,
            },
        ]
    }

    fn example_call(&self) -> Value {
        json!({
            "action": "password_verify",
            "parameters": {
                "password": "MySecureP@ssw0rd",
                "hash": "$2b$12$abc123def456..."
            }
        })
    }

    fn example_output(&self) -> String {
        "Password matches".to_string()
    }

    fn category(&self) -> crate::DriverCategory {
        crate::DriverCategory::Cryptography
    }

    async fn execute(
        &self,
        parameters: &HashMap<String, Value>,
        callback: Option<&dyn DriverCallback>,
        context: Option<&DriverContext>,
    ) -> Result<String> {
        let password = parameters
            .get("password")
            .and_then(|v| v.as_str())
            .ok_or_else(|| anyhow::anyhow!("Missing 'password' parameter"))?;
        let hash = parameters
            .get("hash")
            .and_then(|v| v.as_str())
            .ok_or_else(|| anyhow::anyhow!("Missing 'hash' parameter"))?;

        // Detect algorithm from hash format
        let is_valid = if hash.starts_with("$2") {
            // bcrypt hash
            bcrypt_verify(password, hash)?
        } else if hash.starts_with("$argon2id") {
            // Argon2id hash
            argon2_verify(password, hash)?
        } else {
            anyhow::bail!("Unsupported hash format: {}", hash)
        };

        if is_valid {
            Ok("Password matches".to_string())
        } else {
            Ok("Password does not match".to_string())
        }
    }

    fn validate(&self, parameters: &HashMap<String, Value>) -> Result<()> {
        parameters
            .get("password")
            .ok_or_else(|| anyhow::anyhow!("Missing required parameter: password"))?;
        parameters
            .get("hash")
            .ok_or_else(|| anyhow::anyhow!("Missing required parameter: hash"))?;
        Ok(())
    }
}