feat : securité password avec bcrypt

Blazor/Blazor/Blazor.csproj

@@ -18,6 +18,7 @@
   </ItemGroup>
 
   <ItemGroup>
+    <PackageReference Include="BCrypt.Net-Next" Version="4.0.3" />
     <PackageReference Include="Blazored.LocalStorage" Version="4.4.0" />
     <PackageReference Include="Blazored.Modal" Version="7.1.0" />
     <PackageReference Include="Blazorise.Bootstrap" Version="1.4.0" />

Blazor/Blazor/Models/AdministratorModel.cs

@@ -1,5 +1,6 @@
 using Microsoft.AspNetCore.Cryptography.KeyDerivation;
 using Microsoft.AspNetCore.Identity;
+using BCrypt.Net;
 using System.Security.Cryptography;
 using System.ComponentModel.DataAnnotations;
 using System.Text;
@@ -22,18 +23,24 @@ public class AdministratorModel
 
     public void HashPassword(string password)
     {
-        using (MD5 md5 = MD5.Create())
+        this.HashedPassword = BCrypt.Net.BCrypt.HashPassword(password, BCrypt.Net.BCrypt.GenerateSalt());
-        {
-            byte[] inputBytes = Encoding.UTF8.GetBytes(password);
-            byte[] hashBytes = md5.ComputeHash(inputBytes);
-
-            StringBuilder sb = new StringBuilder();
-            for (int i = 0; i < hashBytes.Length; i++)
-            {
-                sb.Append(hashBytes[i].ToString("x2"));
-            }
-
-            HashedPassword = sb.ToString();
-        }
     }
+
+
+    //public void HashPassword(string password)
+    //{
+    //    using (MD5 md5 = MD5.Create())
+    //    {
+    //        byte[] inputBytes = Encoding.UTF8.GetBytes(password);
+    //        byte[] hashBytes = md5.ComputeHash(inputBytes);
+
+    //        StringBuilder sb = new StringBuilder();
+    //        for (int i = 0; i < hashBytes.Length; i++)
+    //        {
+    //            sb.Append(hashBytes[i].ToString("x2"));
+    //        }
+
+    //        HashedPassword = sb.ToString();
+    //    }
+    //}
 }

Blazor/Blazor/Models/PlayerModel.cs

@@ -21,18 +21,23 @@ public class PlayerModel
 
     public void HashPassword(string password)
     {
-        using (MD5 md5 = MD5.Create())
+        this.HashedPassword = BCrypt.Net.BCrypt.HashPassword(password, BCrypt.Net.BCrypt.GenerateSalt());
-        {
-            byte[] inputBytes = Encoding.UTF8.GetBytes(password);
-            byte[] hashBytes = md5.ComputeHash(inputBytes);
-
-            StringBuilder sb = new StringBuilder();
-            for (int i = 0; i < hashBytes.Length; i++)
-            {
-                sb.Append(hashBytes[i].ToString("x2"));
-            }
-
-            HashedPassword = sb.ToString();
-        }
     }
+
+    //public void HashPassword(string password)
+    //{
+    //    using (MD5 md5 = MD5.Create())
+    //    {
+    //        byte[] inputBytes = Encoding.UTF8.GetBytes(password);
+    //        byte[] hashBytes = md5.ComputeHash(inputBytes);
+
+    //        StringBuilder sb = new StringBuilder();
+    //        for (int i = 0; i < hashBytes.Length; i++)
+    //        {
+    //            sb.Append(hashBytes[i].ToString("x2"));
+    //        }
+
+    //        HashedPassword = sb.ToString();
+    //    }
+    //}
 }

Blazor/Test/Test.csproj

@@ -10,6 +10,7 @@
   </PropertyGroup>
 
   <ItemGroup>
+    <PackageReference Include="BCrypt.Net-Next" Version="4.0.3" />
     <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.6.0" />
     <PackageReference Include="MSTest.TestAdapter" Version="3.0.4" />
     <PackageReference Include="MSTest.TestFramework" Version="3.0.4" />