From 83c953e959071986f9442b54905da5aeb064fa00 Mon Sep 17 00:00:00 2001
From: "gwenael.planchon" <gwenael.planchon@etu.uca.fr>
Date: Fri, 22 Mar 2024 10:25:49 +0100
Subject: [PATCH] =?UTF-8?q?hasher=20le=20mdp=20cot=C3=A9=20client=20lors?=
 =?UTF-8?q?=20de=20l'inscription?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 science-quest/src/assets/const.js            |  4 ++-
 science-quest/src/components/Inscription.vue | 27 +++++++++++++-------
 2 files changed, 21 insertions(+), 10 deletions(-)

diff --git a/science-quest/src/assets/const.js b/science-quest/src/assets/const.js
index 719f2e9..a7634d2 100644
--- a/science-quest/src/assets/const.js
+++ b/science-quest/src/assets/const.js
@@ -1,3 +1,5 @@
 export const NOM_APP="ScienceQuest"
 
-export const REST_API="https://sae-java.alix-jdlm.fr/api/v1"
\ No newline at end of file
+export const REST_API="https://sae-java.alix-jdlm.fr/api/v1"
+
+export const ALGO_HASH_MDP="SHA-256"
\ No newline at end of file
diff --git a/science-quest/src/components/Inscription.vue b/science-quest/src/components/Inscription.vue
index 2f61b06..cb554fb 100644
--- a/science-quest/src/components/Inscription.vue
+++ b/science-quest/src/components/Inscription.vue
@@ -1,20 +1,29 @@
 <script>
-import { REST_API } from '@/assets/const'
-
-//TODO : merger login et inscription ?
+import { REST_API, ALGO_HASH_MDP } from '@/assets/const'
 
 export default {
     methods:{
         creerCompte(event){
             event.stopPropagation()
-            const donnees=new FormData(formajouter)
-            //TODO : hasher le mdp
-            const donneesJson=JSON.stringify(Object.fromEntries(donnees))
-
-            console.log(donnees)
-            //fetch(REST_API+"/utilisateur", {method:"POST", body:donneesJson}).then(response=>)
+            let donnees=Object.fromEntries(new FormData(formajouter))
+            this.hasherMDP(donnees.motDePasse).then(hashMDP=>{
+                donnees.motDePasse=hashMDP
+                const donneesJson=JSON.stringify(donnees)
+                console.log(donnees)
+                //fetch(REST_API+"/utilisateur", {method:"POST", body:donneesJson}).then(response=>)
+            })
+        },
+        async hasherMDP(mdp){
+            const msgUint8 = new TextEncoder().encode(mdp); //transformer le string en array de bytes
+            const hashBuffer = await crypto.subtle.digest(ALGO_HASH_MDP, msgUint8); //hasher le mot de passe
+            const hashArray = Array.from(new Uint8Array(hashBuffer));
+            const hashHex = hashArray
+                .map((b) => b.toString(16).padStart(2, "0")) //convertir chaque byte en hex
+                .join("");
+            return hashHex;
         }
     }
+    
 }
 
 </script>