rbac

internal/pkg/auth/password.go

@@ -0,0 +1,18 @@
+// Package auth 提供后台账号密码哈希与校验能力（bcrypt）。
+package auth
+
+import "golang.org/x/crypto/bcrypt"
+
+// HashPassword 生成 bcrypt 哈希，用于安全存储管理员密码。
+func HashPassword(plain string) (string, error) {
+	b, err := bcrypt.GenerateFromPassword([]byte(plain), bcrypt.DefaultCost)
+	if err != nil {
+		return "", err
+	}
+	return string(b), nil
+}
+
+// VerifyPassword 校验明文密码与 bcrypt 哈希是否匹配。
+func VerifyPassword(plain, hash string) bool {
+	return bcrypt.CompareHashAndPassword([]byte(hash), []byte(plain)) == nil
+}

internal/pkg/auth/password_test.go

@@ -0,0 +1,18 @@
+package auth
+
+import (
+	"testing"
+
+	"github.com/stretchr/testify/require"
+)
+
+func TestHashAndVerifyPassword(t *testing.T) {
+	plain := "Admin@123456"
+	hash, err := HashPassword(plain)
+	require.NoError(t, err)
+	require.NotEmpty(t, hash)
+	require.NotEqual(t, plain, hash)
+
+	require.True(t, VerifyPassword(plain, hash))
+	require.False(t, VerifyPassword("wrong", hash))
+}