mirror of
https://github.com/R0m1k3/xtremflow.git
synced 2026-10-22 22:48:04 +02:00
Serveur réécrit en Rust
Le serveur Dart (bin/) est remplacé par un serveur Rust (server/) : tokio + axum, reqwest/rustls, SQLite embarqué via rusqlite. Même API, mêmes routes et mêmes réponses : le front Flutter ne change pas. La base de production est reprise telle quelle : schéma, migrations et formats de dates (DateTime.toIso8601String de Dart) sont reproduits à l'identique, les sessions et hachages existants restent valides. Comportement conservé : cascade de routage, anti-SSRF, logs masqués, rate limits, transcodage HLS/turbo.ts avec repli GPU, quotas fournisseur, enregistrements (reprise, relances, fusion), season passes, EPG, logos de repli, arrêt gracieux sur SIGTERM. Tests Dart portés (132 tests Rust) ; la CI exécute fmt, test et clippy -D warnings, l'image Docker compile le serveur dans un étage rust:1.98.1. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
1 parent
f82c70ae05
commit
3ea6fa0ae3
109 files changed
+14008
-11047
No files matched your search
@@ -1,35 +0,0 @@
|
||||
import 'dart:convert';
|
||||
import 'package:bcrypt/bcrypt.dart';
|
||||
import 'package:crypto/crypto.dart';
|
||||
|
||||
class PasswordHasher {
|
||||
/// Cost factor 10: ~100-300ms per hash in pure Dart, acceptable for login frequency.
|
||||
static const int _bcryptRounds = 10;
|
||||
|
||||
/// Legacy hashes are unsalted SHA-256 hex digests (64 hex chars).
|
||||
static final RegExp _legacyPattern = RegExp(r'^[0-9a-f]{64}$');
|
||||
|
||||
/// Hash a password using bcrypt (salt embedded in the result).
|
||||
static String hash(String password) {
|
||||
return BCrypt.hashpw(password, BCrypt.gensalt(logRounds: _bcryptRounds));
|
||||
}
|
||||
|
||||
/// Verify a password against a stored hash.
|
||||
/// Supports legacy unsalted SHA-256 hashes for accounts created before
|
||||
/// the bcrypt migration; those are rehashed lazily on successful login.
|
||||
static bool verify(String password, String hash) {
|
||||
if (isLegacy(hash)) {
|
||||
final digest = sha256.convert(utf8.encode(password)).toString();
|
||||
return digest == hash;
|
||||
}
|
||||
try {
|
||||
return BCrypt.checkpw(password, hash);
|
||||
} catch (_) {
|
||||
// Malformed hash (neither legacy SHA-256 nor valid bcrypt)
|
||||
return false;
|
||||
}
|
||||
}
|
||||
|
||||
/// True if the stored hash uses the legacy unsalted SHA-256 scheme.
|
||||
static bool isLegacy(String hash) => _legacyPattern.hasMatch(hash);
|
||||
}
|
||||
Reference in new issue
Block a user