Contents

require "digest/sha1"

module Authlogic
  module CryptoProviders
    # = Sha1
    #
    # This class was made for the users transitioning from restful_authentication. I highly discourage using this crypto provider as it inferior to your other options.
    # Please use the Sha512 crypto provider or the BCrypt provider.
    class Sha1
      class << self
        def join_token
          @join_token ||= "--"
        end
        attr_writer :join_token
        
        # The number of times to loop through the encryption. This is ten because that is what restful_authentication defaults to.
        def stretches
          @stretches ||= 10
        end
        attr_writer :stretches
        
        # Turns your raw password into a Sha1 hash.
        def encrypt(*tokens)
          tokens = tokens.flatten
          digest = tokens.shift
          stretches.times { digest = Digest::SHA1.hexdigest([digest, *tokens].join(join_token)) }
          digest
        end
        
        # Does the crypted password match the tokens? Uses the same tokens that were used to encrypt.
        def matches?(crypted, *tokens)
          encrypt(*tokens) == crypted
        end
      end
    end
  end
end

Version data entries

4 entries across 4 versions & 1 rubygems

Version	Path
authlogic-1.3.7	lib/authlogic/crypto_providers/sha1.rb
authlogic-1.3.4	lib/authlogic/crypto_providers/sha1.rb
authlogic-1.3.5	lib/authlogic/crypto_providers/sha1.rb
authlogic-1.3.6	lib/authlogic/crypto_providers/sha1.rb