password_manager.hpp

/* -*- mode: c++; tab-width: 4; indent-tabs-mode: nil; c-basic-offset: 4 -*-
 *
 * Copyright (C) 2025 Marco Craveiro <marco.craveiro@gmail.com>
 *
 * This program is free software; you can redistribute it and/or modify it under
 * the terms of the GNU General Public License as published by the Free Software
 * Foundation; either version 3 of the License, or (at your option) any later
 * version.
 *
 * This program is distributed in the hope that it will be useful, but WITHOUT
 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
 * FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
 * details.
 *
 * You should have received a copy of the GNU General Public License along with
 * this program; if not, write to the Free Software Foundation, Inc., 51
 * Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
 *
 */
#ifndef ORES_ACCOUNTS_SECURITY_PASSWORD_MANAGER_HPP
#define ORES_ACCOUNTS_SECURITY_PASSWORD_MANAGER_HPP
 
#include <string>
#include "ores.utility/log/make_logger.hpp"
 
namespace ores::accounts::security {
 
class password_manager {
private:
    inline static std::string_view logger_name =
        "ores.accounts.security.password_manager";
 
    [[nodiscard]] static auto& lg() {
        using namespace ores::utility::log;
        static auto instance = make_logger(logger_name);
        return instance;
    }
 
    static std::string base64_encode(const std::vector<unsigned char>& data);
 
    static std::vector<unsigned char> base64_decode(const std::string& encoded);
 
    // scrypt parameters - OWASP recommendations
    static constexpr std::uint64_t DEFAULT_N = 1 << 14; 
    static constexpr std::uint32_t DEFAULT_r = 8;       
    static constexpr std::uint32_t DEFAULT_p = 1;       
    static constexpr std::size_t SALT_LEN = 16;
    static constexpr std::size_t HASH_LEN = 64;
 
public:
    static std::string create_password_hash(const std::string &password);
 
    static bool verify_password_hash(const std::string& password,
        const std::string &hash);
};
 
}
 
#endif