Add password hashing with argon2

internal/auth/credentials.go

@@ -1,10 +1,18 @@
 package auth
 
-import "errors"
+import (
+	"errors"
+
+	"github.com/Bronku/iroon/internal/crypto"
+)
 
 func (a *Authenticator) verifyCredentials(login, password string) error {
-
-	if login == "admin" && password == "secret" {
+	user, ok := a.s.GetUser(login)
+	if !ok {
+		return errors.New("user with this login doesn't exist")
+	}
+	hash := crypto.PasswordHash(password, user.Salt)
+	if hash == user.Password {
 		return nil
 	}
 	return errors.New("wrong credentials")

internal/auth/token.go

@@ -1,17 +1,15 @@
 package auth
 
 import (
-	"crypto/rand"
-	"encoding/base64"
-	"log"
 	"net/http"
 	"time"
 
+	"github.com/Bronku/iroon/internal/crypto"
 	"github.com/Bronku/iroon/internal/models"
 )
 
 func (a *Authenticator) newSession(user string) (http.Cookie, error) {
-	key := generateKey()
+	key := crypto.GenerateKey()
 	var session models.Token
 	var cookie http.Cookie
 	session.User = user
@@ -30,11 +28,3 @@ func (a *Authenticator) newSession(user string) (http.Cookie, error) {
 	//cookie.Secure = true
 	return cookie, nil
 }
-
-func generateKey() string {
-	key := [32]byte{}
-	if _, err := rand.Read(key[:]); err != nil {
-		log.Fatal("can't generate a vaild key", err)
-	}
-	return base64.StdEncoding.EncodeToString(key[:])
-}