maulanasdqnandClaude Sonnet 4.6
331a4a4e88
- Enforce axum best practices across all 13 workspace crates (max 200 LOC/file, no comments, no unwrap, clean architecture) - Fix domain→infrastructure dependency inversions in imphnen-iam and imphnen-dimentorin - Extract imphnen-storage (MinIO) and imphnen-email (Lettre) as standalone crates - Centralize all config in ENV struct: CDN_URL, CORS_ALLOWED_ORIGINS - Centralize SMTP through imphnen-email; remove dead HackathonConfig - Centralize database: QR crate now shares main DB pool (single DATABASE_URL) - Rename QR users table to qr_users to avoid collision with main users table - Merge imphnen-qr into imphnen-cms/src/qr (13 crates, down from 14) - Restructure imphnen-hackathon flat modules into clean architecture - Remove all stale env vars from .env.example (SurrealDB, QR_JWT, Hackathon infra) - Fix Dockerfile to include all current workspace crates - Bump all crate versions 0.2.0 → 0.3.0 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
81 lines
1.9 KiB
Rust
81 lines
1.9 KiB
Rust
use chrono::{DateTime, Duration, Utc};
|
|
use rand::{Rng, rng};
|
|
use sha2::{Digest, Sha256};
|
|
|
|
#[derive(Debug, Clone)]
|
|
pub struct OtpData {
|
|
pub code: u32,
|
|
pub hash: String,
|
|
pub expires_at: DateTime<Utc>,
|
|
}
|
|
|
|
pub struct OtpManager;
|
|
|
|
impl OtpManager {
|
|
pub fn generate_otp() -> OtpData {
|
|
let code = rng().random_range(100_000..1_000_000);
|
|
let otp_str = code.to_string();
|
|
let mut hasher = Sha256::new();
|
|
hasher.update(otp_str.as_bytes());
|
|
let hash = format!("{:x}", hasher.finalize());
|
|
let expires_at = Utc::now() + Duration::minutes(5);
|
|
OtpData {
|
|
code,
|
|
hash,
|
|
expires_at,
|
|
}
|
|
}
|
|
|
|
pub fn validate_otp(stored: &OtpData, user_otp: u32) -> bool {
|
|
if Utc::now() > stored.expires_at {
|
|
return false;
|
|
}
|
|
let user_otp_str = user_otp.to_string();
|
|
let mut hasher = Sha256::new();
|
|
hasher.update(user_otp_str.as_bytes());
|
|
let user_hash = format!("{:x}", hasher.finalize());
|
|
user_hash == stored.hash
|
|
}
|
|
}
|
|
|
|
#[cfg(test)]
|
|
mod tests {
|
|
use super::*;
|
|
|
|
#[test]
|
|
fn test_generate_otp() {
|
|
let otp = OtpManager::generate_otp();
|
|
assert!(otp.code >= 100_000 && otp.code < 1_000_000);
|
|
assert!(!otp.hash.is_empty());
|
|
assert!(otp.expires_at > Utc::now());
|
|
assert!(otp.expires_at <= Utc::now() + chrono::Duration::minutes(5));
|
|
}
|
|
|
|
#[test]
|
|
fn test_validate_otp_valid() {
|
|
let otp = OtpManager::generate_otp();
|
|
assert!(OtpManager::validate_otp(&otp, otp.code));
|
|
}
|
|
|
|
#[test]
|
|
fn test_validate_otp_invalid_code() {
|
|
let otp = OtpManager::generate_otp();
|
|
assert!(!OtpManager::validate_otp(&otp, 123456));
|
|
}
|
|
|
|
#[test]
|
|
fn test_validate_otp_expired() {
|
|
let mut otp = OtpManager::generate_otp();
|
|
otp.expires_at = Utc::now() - chrono::Duration::seconds(1);
|
|
assert!(!OtpManager::validate_otp(&otp, otp.code));
|
|
}
|
|
|
|
#[test]
|
|
fn test_otp_uniqueness() {
|
|
let otp1 = OtpManager::generate_otp();
|
|
let otp2 = OtpManager::generate_otp();
|
|
assert_ne!(otp1.code, otp2.code);
|
|
assert_ne!(otp1.hash, otp2.hash);
|
|
}
|
|
}
|