from bcrypt import hashpw, gensalt

# 这个是随机生成的盐
salt = gensalt(12)

# 这个是通过盐去加密
passwd = hashpw("123456".encode('utf8'), salt)

# 将输入的明文密码与密文密码进行加密，是否等于密文密码。
hashpw(input_passwd.encode('utf8'), passwd) == passwd

1
2
3
4
5
6
7
8
9
10

class PasswordHash(bytes):
    def check_password(self, password):
        """
        比较传入的密码和数据库中的密码是否匹配
        :param password:
        :return:
        """
        password = password.encode('utf-8')
        return hashpw(password, self) == self

class PasswordField(BlobField):
    def __init__(self, iterations=12, *args, **kwargs):
        if None in (hashpw, gensalt):
            raise ValueError('Missing library required for PasswordField: bcrypt')
        self.bcrypt_iterations = iterations
        self.raw_password = None
        super(PasswordField, self).__init__(*args, **kwargs)

    def db_value(self, value):
        """
        将python的值转换成存入数据库的值
        存入数据库的值，是通过bcrypt加密后的密文。
        :param value:
        :return:
        """
        if isinstance(value, PasswordHash):
            return bytes(value)

        if isinstance(value, str):
            value = value.encode('utf-8')
        salt = gensalt(self.bcrypt_iterations)
        return value if value is None else hashpw(value, salt)

    def python_value(self, value):
        """
        将数据库中的值转换成python中的值
        这个值是一个PasswordHash对象。该对象提供比较密码的方法。
        :param value:
        :return:
        """
        if isinstance(value, str):
            value = value.encode('utf-8')

        return PasswordHash(value)

class User(BaseModel):
    username = CharField(max_length=16, verbose_name="用户名", index=True, unique=True)
    password = PasswordField(verbose_name="密码")
    address = CharField(max_length=200, null=True, verbose_name="地址")

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49

class RegisterHandler(BaseHandler):

    async def post(self):

        ret_data = {}

        registerForm = RegisterForm(self.request.arguments)
        if registerForm.validate():
            username = registerForm.username.data

            try:
                exist_user = await self.application.objects.get(User, username=username)
                ret_data["username"] = "用户名已经存在"
            except User.DoesNotExist as e:
                user = await self.application.objects.create(User, **registerForm.data)
                ret_data["id"] = user.id
        else:
            self.set_status(400)
            for field in registerForm.erros:
                ret_data[field] = registerForm[field][0]

        return self.finish(ret_data)

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22