glm94/secure-core
1
0
Fork 0
Code Issues 9 Pull Requests Releases Wiki Activity

Added password and session creation functions.

Browse Source
This commit is contained in:
glm94
2021-01-01 13:29:10 -08:00
parent 26c59555ab
commit 5621418bd7
26 changed files with 232 additions and 56 deletions
Download Patch File Download Diff File Expand all files Collapse all files
SecureCore/Controllers/EmployeeController.cs
+57 -1
View File
@@ -3,8 +3,10 @@ using Microsoft.AspNetCore.Mvc;
using System;
using System.Collections.Generic;
using System.Linq;
using System.Threading.Tasks;
using System.Text;
using SecureCore.Services;
using System.Security.Cryptography;
using Microsoft.AspNetCore.Cryptography.KeyDerivation;
namespace SecureCore.Controllers
{
@@ -31,5 +33,59 @@ namespace SecureCore.Controllers
{
return Ok(DataService.GetById(id));
}
[HttpPost("login")]
[AcceptVerbs("POST")]
public IActionResult Login(LoginInfo info)
{
var hash = Auth.HashPassword(info.Password, out string salt);
return Ok($"Session Key: {Auth.CreateSessionId()}{Environment.NewLine}Password Hash: {hash}{Environment.NewLine}Salt: {salt}{Environment.NewLine}");
}
}
public class LoginInfo
{
public string UserName { get; set; }
public string Password { get; set; }
}
public static class Auth
{
public static string CreateSessionId()
{
var sessionId = new byte[32];
GetRandomBytes(ref sessionId);
return ConvertToHex(sessionId);
}
public static string HashPassword(string password, out string saltString)
{
//Generate a 128 bit salt
var salt = new byte[128 / 8];
GetRandomBytes(ref salt);
saltString = ConvertToHex(salt);
return Convert.ToBase64String(KeyDerivation.Pbkdf2(password, salt, KeyDerivationPrf.HMACSHA512, 50000, 512 / 8));
}
private static string ConvertToHex(byte[] bytes)
{
var stringBuilder = new StringBuilder();
foreach (var b in bytes)
stringBuilder.AppendFormat("{0:x2}", b);
return stringBuilder.ToString();
}
private static void GetRandomBytes(ref byte[] bytes)
{
using(var rng = RandomNumberGenerator.Create())
rng.GetBytes(bytes);
}
}
}
SecureCore/SecureCore.csproj
+4
View File
@@ -5,5 +5,9 @@
<UserSecretsId>e3dff1d0-8e29-4bc2-8020-8999a38530f3</UserSecretsId>
</PropertyGroup>
<ItemGroup>
<PackageReference Include="Microsoft.AspNetCore.Cryptography.KeyDerivation" Version="5.0.1" />
</ItemGroup>
</Project>
SecureCore/bin/Debug/netcoreapp3.1/SecureCore.dll
BIN
View File
Binary file not shown.
SecureCore/bin/Debug/netcoreapp3.1/SecureCore.pdb
BIN
View File
Binary file not shown.
SecureCore/bin/Release/netcoreapp3.1/SecureCore.deps.json
+40 -24
View File
@@ -24,6 +24,7 @@
".NETCoreApp,Version=v3.1": {
"SecureCore/1.0.0": {
"dependencies": {
"Microsoft.AspNetCore.Cryptography.KeyDerivation": "5.0.1",
"Microsoft.AspNetCore.Antiforgery": "3.1.0.0",
"Microsoft.AspNetCore.Authentication.Abstractions": "3.1.0.0",
"Microsoft.AspNetCore.Authentication.Cookies": "3.1.0.0",
@@ -40,8 +41,6 @@
"Microsoft.AspNetCore.Connections.Abstractions": "3.1.0.0",
"Microsoft.AspNetCore.CookiePolicy": "3.1.0.0",
"Microsoft.AspNetCore.Cors": "3.1.0.0",
"Microsoft.AspNetCore.Cryptography.Internal": "3.1.0.0",
"Microsoft.AspNetCore.Cryptography.KeyDerivation": "3.1.0.0",
"Microsoft.AspNetCore.DataProtection.Abstractions": "3.1.0.0",
"Microsoft.AspNetCore.DataProtection": "3.1.0.0",
"Microsoft.AspNetCore.DataProtection.Extensions": "3.1.0.0",
@@ -314,6 +313,31 @@
"SecureCore.dll": {}
}
},
"Microsoft.AspNetCore.Cryptography.Internal/5.0.1": {
"runtime": {
"lib/netstandard2.0/Microsoft.AspNetCore.Cryptography.Internal.dll": {
"assemblyVersion": "5.0.0.0",
"fileVersion": "5.0.120.60107"
}
},
"compile": {
"lib/netstandard2.0/Microsoft.AspNetCore.Cryptography.Internal.dll": {}
}
},
"Microsoft.AspNetCore.Cryptography.KeyDerivation/5.0.1": {
"dependencies": {
"Microsoft.AspNetCore.Cryptography.Internal": "5.0.1"
},
"runtime": {
"lib/netstandard2.0/Microsoft.AspNetCore.Cryptography.KeyDerivation.dll": {
"assemblyVersion": "5.0.0.0",
"fileVersion": "5.0.120.60107"
}
},
"compile": {
"lib/netstandard2.0/Microsoft.AspNetCore.Cryptography.KeyDerivation.dll": {}
}
},
"Microsoft.AspNetCore.Antiforgery/3.1.0.0": {
"compile": {
"Microsoft.AspNetCore.Antiforgery.dll": {}
@@ -410,18 +434,6 @@
},
"compileOnly": true
},
"Microsoft.AspNetCore.Cryptography.Internal/3.1.0.0": {
"compile": {
"Microsoft.AspNetCore.Cryptography.Internal.dll": {}
},
"compileOnly": true
},
"Microsoft.AspNetCore.Cryptography.KeyDerivation/3.1.0.0": {
"compile": {
"Microsoft.AspNetCore.Cryptography.KeyDerivation.dll": {}
},
"compileOnly": true
},
"Microsoft.AspNetCore.DataProtection.Abstractions/3.1.0.0": {
"compile": {
"Microsoft.AspNetCore.DataProtection.Abstractions.dll": {}
@@ -2014,6 +2026,20 @@
"serviceable": false,
"sha512": ""
},
"Microsoft.AspNetCore.Cryptography.Internal/5.0.1": {
"type": "package",
"serviceable": true,
"sha512": "sha512-VGfj77RBkyWpPxvX6oSghE3DPObvg171HRdwr/t3aJQ9Y5cgaZE8BUNLhHZ0yBFa218r7e9Qou+DLGfRtve4CQ==",
"path": "microsoft.aspnetcore.cryptography.internal/5.0.1",
"hashPath": "microsoft.aspnetcore.cryptography.internal.5.0.1.nupkg.sha512"
},
"Microsoft.AspNetCore.Cryptography.KeyDerivation/5.0.1": {
"type": "package",
"serviceable": true,
"sha512": "sha512-kYiQ5AZMKVIB+28+ImC6GihJTSh2Sr6iofiYtsOOnCbgCmNBljH4n+r8Qfocxv78xeeby5lwZorq05OvriDbOQ==",
"path": "microsoft.aspnetcore.cryptography.keyderivation/5.0.1",
"hashPath": "microsoft.aspnetcore.cryptography.keyderivation.5.0.1.nupkg.sha512"
},
"Microsoft.AspNetCore.Antiforgery/3.1.0.0": {
"type": "referenceassembly",
"serviceable": false,
@@ -2094,16 +2120,6 @@
"serviceable": false,
"sha512": ""
},
"Microsoft.AspNetCore.Cryptography.Internal/3.1.0.0": {
"type": "referenceassembly",
"serviceable": false,
"sha512": ""
},
"Microsoft.AspNetCore.Cryptography.KeyDerivation/3.1.0.0": {
"type": "referenceassembly",
"serviceable": false,
"sha512": ""
},
"Microsoft.AspNetCore.DataProtection.Abstractions/3.1.0.0": {
"type": "referenceassembly",
"serviceable": false,
SecureCore/bin/Release/netcoreapp3.1/SecureCore.dll
BIN
View File
Binary file not shown.
SecureCore/bin/Release/netcoreapp3.1/SecureCore.pdb
BIN
View File
Binary file not shown.
SecureCore/obj/Debug/netcoreapp3.1/SecureCore.assets.cache
BIN
View File
Binary file not shown.
SecureCore/obj/Debug/netcoreapp3.1/SecureCore.csprojAssemblyReference.cache
BIN
View File
Binary file not shown.
SecureCore/obj/Debug/netcoreapp3.1/SecureCore.dll
BIN
View File
Binary file not shown.
SecureCore/obj/Debug/netcoreapp3.1/SecureCore.pdb
BIN
View File
Binary file not shown.
SecureCore/obj/Release/netcoreapp3.1/PubTmp/Out/SecureCore.deps.json
+40 -24
View File
@@ -24,6 +24,7 @@
".NETCoreApp,Version=v3.1": {
"SecureCore/1.0.0": {
"dependencies": {
"Microsoft.AspNetCore.Cryptography.KeyDerivation": "5.0.1",
"Microsoft.AspNetCore.Antiforgery": "3.1.0.0",
"Microsoft.AspNetCore.Authentication.Abstractions": "3.1.0.0",
"Microsoft.AspNetCore.Authentication.Cookies": "3.1.0.0",
@@ -40,8 +41,6 @@
"Microsoft.AspNetCore.Connections.Abstractions": "3.1.0.0",
"Microsoft.AspNetCore.CookiePolicy": "3.1.0.0",
"Microsoft.AspNetCore.Cors": "3.1.0.0",
"Microsoft.AspNetCore.Cryptography.Internal": "3.1.0.0",
"Microsoft.AspNetCore.Cryptography.KeyDerivation": "3.1.0.0",
"Microsoft.AspNetCore.DataProtection.Abstractions": "3.1.0.0",
"Microsoft.AspNetCore.DataProtection": "3.1.0.0",
"Microsoft.AspNetCore.DataProtection.Extensions": "3.1.0.0",
@@ -314,6 +313,31 @@
"SecureCore.dll": {}
}
},
"Microsoft.AspNetCore.Cryptography.Internal/5.0.1": {
"runtime": {
"lib/netstandard2.0/Microsoft.AspNetCore.Cryptography.Internal.dll": {
"assemblyVersion": "5.0.0.0",
"fileVersion": "5.0.120.60107"
}
},
"compile": {
"lib/netstandard2.0/Microsoft.AspNetCore.Cryptography.Internal.dll": {}
}
},
"Microsoft.AspNetCore.Cryptography.KeyDerivation/5.0.1": {
"dependencies": {
"Microsoft.AspNetCore.Cryptography.Internal": "5.0.1"
},
"runtime": {
"lib/netstandard2.0/Microsoft.AspNetCore.Cryptography.KeyDerivation.dll": {
"assemblyVersion": "5.0.0.0",
"fileVersion": "5.0.120.60107"
}
},
"compile": {
"lib/netstandard2.0/Microsoft.AspNetCore.Cryptography.KeyDerivation.dll": {}
}
},
"Microsoft.AspNetCore.Antiforgery/3.1.0.0": {
"compile": {
"Microsoft.AspNetCore.Antiforgery.dll": {}
@@ -410,18 +434,6 @@
},
"compileOnly": true
},
"Microsoft.AspNetCore.Cryptography.Internal/3.1.0.0": {
"compile": {
"Microsoft.AspNetCore.Cryptography.Internal.dll": {}
},
"compileOnly": true
},
"Microsoft.AspNetCore.Cryptography.KeyDerivation/3.1.0.0": {
"compile": {
"Microsoft.AspNetCore.Cryptography.KeyDerivation.dll": {}
},
"compileOnly": true
},
"Microsoft.AspNetCore.DataProtection.Abstractions/3.1.0.0": {
"compile": {
"Microsoft.AspNetCore.DataProtection.Abstractions.dll": {}
@@ -2014,6 +2026,20 @@
"serviceable": false,
"sha512": ""
},
"Microsoft.AspNetCore.Cryptography.Internal/5.0.1": {
"type": "package",
"serviceable": true,
"sha512": "sha512-VGfj77RBkyWpPxvX6oSghE3DPObvg171HRdwr/t3aJQ9Y5cgaZE8BUNLhHZ0yBFa218r7e9Qou+DLGfRtve4CQ==",
"path": "microsoft.aspnetcore.cryptography.internal/5.0.1",
"hashPath": "microsoft.aspnetcore.cryptography.internal.5.0.1.nupkg.sha512"
},
"Microsoft.AspNetCore.Cryptography.KeyDerivation/5.0.1": {
"type": "package",
"serviceable": true,
"sha512": "sha512-kYiQ5AZMKVIB+28+ImC6GihJTSh2Sr6iofiYtsOOnCbgCmNBljH4n+r8Qfocxv78xeeby5lwZorq05OvriDbOQ==",
"path": "microsoft.aspnetcore.cryptography.keyderivation/5.0.1",
"hashPath": "microsoft.aspnetcore.cryptography.keyderivation.5.0.1.nupkg.sha512"
},
"Microsoft.AspNetCore.Antiforgery/3.1.0.0": {
"type": "referenceassembly",
"serviceable": false,
@@ -2094,16 +2120,6 @@
"serviceable": false,
"sha512": ""
},
"Microsoft.AspNetCore.Cryptography.Internal/3.1.0.0": {
"type": "referenceassembly",
"serviceable": false,
"sha512": ""
},
"Microsoft.AspNetCore.Cryptography.KeyDerivation/3.1.0.0": {
"type": "referenceassembly",
"serviceable": false,
"sha512": ""
},
"Microsoft.AspNetCore.DataProtection.Abstractions/3.1.0.0": {
"type": "referenceassembly",
"serviceable": false,
SecureCore/obj/Release/netcoreapp3.1/PubTmp/Out/SecureCore.dll
BIN
View File
Binary file not shown.
SecureCore/obj/Release/netcoreapp3.1/PubTmp/Out/SecureCore.pdb
BIN
View File
Binary file not shown.
SecureCore/obj/Release/netcoreapp3.1/PublishOutputs.d9e5d91e5f.txt
+2
View File
@@ -5,3 +5,5 @@ C:\Users\admin\source\repos\SecureCore\SecureCore\obj\Release\netcoreapp3.1\PubT
C:\Users\admin\source\repos\SecureCore\SecureCore\obj\Release\netcoreapp3.1\PubTmp\Out\SecureCore.deps.json
C:\Users\admin\source\repos\SecureCore\SecureCore\obj\Release\netcoreapp3.1\PubTmp\Out\SecureCore.runtimeconfig.json
C:\Users\admin\source\repos\SecureCore\SecureCore\obj\Release\netcoreapp3.1\PubTmp\Out\SecureCore.pdb
C:\Users\admin\source\repos\SecureCore\SecureCore\obj\Release\netcoreapp3.1\PubTmp\Out\Microsoft.AspNetCore.Cryptography.Internal.dll
C:\Users\admin\source\repos\SecureCore\SecureCore\obj\Release\netcoreapp3.1\PubTmp\Out\Microsoft.AspNetCore.Cryptography.KeyDerivation.dll
SecureCore/obj/Release/netcoreapp3.1/SecureCore.assets.cache
BIN
View File
Binary file not shown.
SecureCore/obj/Release/netcoreapp3.1/SecureCore.csproj.CoreCompileInputs.cache
+1 -1
View File
@@ -1 +1 @@
707cc6b556c13148aa191cb544faa8d46927ce06
bcb5d7715e4b62750b8707cb5830a8376ef8a29b
SecureCore/obj/Release/netcoreapp3.1/SecureCore.csproj.FileListAbsolute.txt
+3
View File
@@ -18,3 +18,6 @@ C:\Users\admin\source\repos\SecureCore\SecureCore\obj\Release\netcoreapp3.1\Secu
C:\Users\admin\source\repos\SecureCore\SecureCore\obj\Release\netcoreapp3.1\SecureCore.dll
C:\Users\admin\source\repos\SecureCore\SecureCore\obj\Release\netcoreapp3.1\SecureCore.pdb
C:\Users\admin\source\repos\SecureCore\SecureCore\obj\Release\netcoreapp3.1\SecureCore.genruntimeconfig.cache
C:\Users\admin\source\repos\SecureCore\SecureCore\bin\Release\netcoreapp3.1\Microsoft.AspNetCore.Cryptography.Internal.dll
C:\Users\admin\source\repos\SecureCore\SecureCore\bin\Release\netcoreapp3.1\Microsoft.AspNetCore.Cryptography.KeyDerivation.dll
C:\Users\admin\source\repos\SecureCore\SecureCore\obj\Release\netcoreapp3.1\SecureCore.csproj.CopyComplete
SecureCore/obj/Release/netcoreapp3.1/SecureCore.csprojAssemblyReference.cache
BIN
View File
Binary file not shown.
SecureCore/obj/Release/netcoreapp3.1/SecureCore.dll
BIN
View File
Binary file not shown.
SecureCore/obj/Release/netcoreapp3.1/SecureCore.pdb
BIN
View File
Binary file not shown.
SecureCore/obj/SecureCore.csproj.nuget.dgspec.json
+6
View File
@@ -39,6 +39,12 @@
"frameworks": {
"netcoreapp3.1": {
"targetAlias": "netcoreapp3.1",
"dependencies": {
"Microsoft.AspNetCore.Cryptography.KeyDerivation": {
"target": "Package",
"version": "[5.0.1, )"
}
},
"imports": [
"net461",
"net462",
SecureCore/obj/project.assets.json
+72 -3
View File
@@ -1,11 +1,74 @@
{
"version": 3,
"targets": {
".NETCoreApp,Version=v3.1": {}
".NETCoreApp,Version=v3.1": {
"Microsoft.AspNetCore.Cryptography.Internal/5.0.1": {
"type": "package",
"compile": {
"lib/netstandard2.0/Microsoft.AspNetCore.Cryptography.Internal.dll": {}
},
"runtime": {
"lib/netstandard2.0/Microsoft.AspNetCore.Cryptography.Internal.dll": {}
}
},
"Microsoft.AspNetCore.Cryptography.KeyDerivation/5.0.1": {
"type": "package",
"dependencies": {
"Microsoft.AspNetCore.Cryptography.Internal": "5.0.1"
},
"compile": {
"lib/netstandard2.0/Microsoft.AspNetCore.Cryptography.KeyDerivation.dll": {}
},
"runtime": {
"lib/netstandard2.0/Microsoft.AspNetCore.Cryptography.KeyDerivation.dll": {}
}
}
}
},
"libraries": {
"Microsoft.AspNetCore.Cryptography.Internal/5.0.1": {
"sha512": "VGfj77RBkyWpPxvX6oSghE3DPObvg171HRdwr/t3aJQ9Y5cgaZE8BUNLhHZ0yBFa218r7e9Qou+DLGfRtve4CQ==",
"type": "package",
"path": "microsoft.aspnetcore.cryptography.internal/5.0.1",
"files": [
".nupkg.metadata",
".signature.p7s",
"Icon.png",
"THIRD-PARTY-NOTICES.TXT",
"lib/net461/Microsoft.AspNetCore.Cryptography.Internal.dll",
"lib/net461/Microsoft.AspNetCore.Cryptography.Internal.xml",
"lib/net5.0/Microsoft.AspNetCore.Cryptography.Internal.dll",
"lib/net5.0/Microsoft.AspNetCore.Cryptography.Internal.xml",
"lib/netstandard2.0/Microsoft.AspNetCore.Cryptography.Internal.dll",
"lib/netstandard2.0/Microsoft.AspNetCore.Cryptography.Internal.xml",
"microsoft.aspnetcore.cryptography.internal.5.0.1.nupkg.sha512",
"microsoft.aspnetcore.cryptography.internal.nuspec"
]
},
"Microsoft.AspNetCore.Cryptography.KeyDerivation/5.0.1": {
"sha512": "kYiQ5AZMKVIB+28+ImC6GihJTSh2Sr6iofiYtsOOnCbgCmNBljH4n+r8Qfocxv78xeeby5lwZorq05OvriDbOQ==",
"type": "package",
"path": "microsoft.aspnetcore.cryptography.keyderivation/5.0.1",
"files": [
".nupkg.metadata",
".signature.p7s",
"Icon.png",
"THIRD-PARTY-NOTICES.TXT",
"lib/net461/Microsoft.AspNetCore.Cryptography.KeyDerivation.dll",
"lib/net461/Microsoft.AspNetCore.Cryptography.KeyDerivation.xml",
"lib/net5.0/Microsoft.AspNetCore.Cryptography.KeyDerivation.dll",
"lib/net5.0/Microsoft.AspNetCore.Cryptography.KeyDerivation.xml",
"lib/netstandard2.0/Microsoft.AspNetCore.Cryptography.KeyDerivation.dll",
"lib/netstandard2.0/Microsoft.AspNetCore.Cryptography.KeyDerivation.xml",
"microsoft.aspnetcore.cryptography.keyderivation.5.0.1.nupkg.sha512",
"microsoft.aspnetcore.cryptography.keyderivation.nuspec"
]
}
},
"libraries": {},
"projectFileDependencyGroups": {
".NETCoreApp,Version=v3.1": []
".NETCoreApp,Version=v3.1": [
"Microsoft.AspNetCore.Cryptography.KeyDerivation >= 5.0.1"
]
},
"packageFolders": {
"C:\\Users\\admin\\.nuget\\packages\\": {}
@@ -45,6 +108,12 @@
"frameworks": {
"netcoreapp3.1": {
"targetAlias": "netcoreapp3.1",
"dependencies": {
"Microsoft.AspNetCore.Cryptography.KeyDerivation": {
"target": "Package",
"version": "[5.0.1, )"
}
},
"imports": [
"net461",
"net462",
SecureCore/obj/project.nuget.cache
+5 -2
View File
@@ -1,8 +1,11 @@
{
"version": 2,
"dgSpecHash": "9FQAdWJG89/k6D0GaFBO0LTdH1bJLNLf/t03TJ8KG7JJrHo16V/4RK3ghJk2Sms/7C9fpATlx8iJQ/EL/gOZrA==",
"dgSpecHash": "kVPmXtAIxW3sLl1aKG4wTc94WxVgDpVrh3dL9khCp0uQd+jCawAmhvkjc5Cx7PmrwWNEqF+HMEi9ePYVrb9lfA==",
"success": true,
"projectFilePath": "C:\\Users\\admin\\source\\repos\\SecureCore\\SecureCore\\SecureCore.csproj",
"expectedPackageFiles": [],
"expectedPackageFiles": [
"C:\\Users\\admin\\.nuget\\packages\\microsoft.aspnetcore.cryptography.internal\\5.0.1\\microsoft.aspnetcore.cryptography.internal.5.0.1.nupkg.sha512",
"C:\\Users\\admin\\.nuget\\packages\\microsoft.aspnetcore.cryptography.keyderivation\\5.0.1\\microsoft.aspnetcore.cryptography.keyderivation.5.0.1.nupkg.sha512"
],
"logs": []
}