1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
|
from sqlalchemy import Column, Integer, String, Float, ForeignKey, LargeBinary, Boolean
from sqlalchemy.ext.declarative import declarative_base
from sqlalchemy.orm import relationship, backref
Base = declarative_base()
_SALT_LEN = 16
_TOKEN_LEN = 16
MAX_USERNAME_SIZE = 20
MAX_PASSWORD_SIZE = 20
class _TableName: # avoid typoes
UserModel = 'users'
LocationInfo = 'location_info'
UserAuth = 'user_auth'
class UserModel(Base):
__tablename__ = _TableName.UserModel
id = Column(Integer, primary_key = True)
gid = Column(Integer)
username = Column(String(MAX_USERNAME_SIZE))
sex = Column(Boolean)
location = None
auth = None
class LocationInfo(Base):
__tablename__ = _TableName.LocationInfo
uid = Column(Integer, ForeignKey(_TableName.UserModel + '.id'), primary_key = True)
lat = Column(Float(precesion = 64))
lng = Column(Float(precesion = 64))
user = relationship("UserModel", uselist = False,
backref = backref("location", uselist = False,
cascade = "all, delete-orphan"))
# More: last_update
from hashlib import sha256
from os import urandom
def _sprinkle_salt(uauth, passwd):
data = sha256(uauth.salt)
data.update(chr(0))
data.update(passwd)
return data.digest()
def _random_binary_string(length):
return urandom(length)
class UserAuth(Base):
__tablename__ = _TableName.UserAuth
uid = Column(Integer, ForeignKey(_TableName.UserModel + '.id'), primary_key = True)
password = Column(LargeBinary)
salt = Column(LargeBinary)
token = Column(LargeBinary)
user = relationship("UserModel", uselist = False,
backref = backref("auth", uselist = False,
cascade = "all, delete-orphan"))
def regen_token(self):
self.token = sha256(_random_binary_string(_TOKEN_LEN)).digest()
def __init__(self, passwd):
self.set_password(passwd)
def set_password(self, passwd):
self.salt = _random_binary_string(_SALT_LEN)
self.password = _sprinkle_salt(self, passwd)
self.regen_token()
def check_password(self, passwd):
passwd = _sprinkle_salt(self, passwd)
return passwd == self.password
def check_token(self, tk):
return self.token == tk
def get_token(self):
return self.token
|