auth

package

v0.10.0 Latest Latest Go to latest Published: Jul 18, 2026 License: Apache-2.0 Imports: 9 Imported by: 0

Details

Package auth provides password hashing and verification.

This section is empty.

This section is empty.

func GenerateTOTPSecret() (string, error)

GenerateTOTPSecret generates a random base32-encoded TOTP secret (160 bits).

func GenerateTOTPURI(secret, issuer, accountName string) string

GenerateTOTPURI builds an otpauth:// URI for use with authenticator apps.

func HashPassword(password string) (string, error)

HashPassword hashes a plaintext password using bcrypt with a cost of 10.

func ValidateTOTP(secret, code string) bool

ValidateTOTP checks a 6-digit code against a TOTP secret. Checks current, previous, and next time step to allow for clock drift.

func VerifyPassword(hash, password string) bool

VerifyPassword compares a plaintext password against a bcrypt hash. Returns true if the password matches the hash.

This section is empty.