feat: use md5 for password

tyanbiao · Nov 26, 2020 · c051751 · c051751
1 parent 19f043b
commit c051751
Show file tree

Hide file tree

Showing 5 changed files with 13 additions and 2 deletions.
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -9,6 +9,7 @@
   },
   "dependencies": {
     "@koa/router": "^10.0.0",
+    "blueimp-md5": "^2.18.0",
     "ejs": "^3.1.5",
     "koa": "^2.13.0",
     "koa-bodyparser": "^4.3.0",

diff --git a/src/middleware/router.js b/src/middleware/router.js
@@ -1,4 +1,6 @@
 const Router = require('@koa/router')
+const md5 = require('blueimp-md5')
+
 const {
   application: applicationConf,
   beancount: beancountConf,
@@ -27,7 +29,7 @@ router.post('/login', async (ctx, next) => {
   const body = ctx.request.body
   if (
     body.username.trim() === applicationConf.username &&
-    body.password.trim() === applicationConf.password
+    body.password.trim() === md5(applicationConf.password)
   ) {
     ctx.session.user = body.username
     ctx.session.signin = true

diff --git a/src/static/md5.min.js b/src/static/md5.min.js
diff --git a/src/view/login.ejs b/src/view/login.ejs
@@ -16,6 +16,7 @@
     </form>
   </div>
   <script src="/static/axios.min.js"></script>
+  <script src="/static/md5.min.js"></script>
   <script>
     const submitBtn = document.querySelector('#submit')
     submitBtn.addEventListener('click', (e) => {
@@ -32,7 +33,7 @@
       }
       axios.post('/login', {
         username,
-        password
+        password: md5(password),
       })
       .then(res => {
         if (res.data && res.data.code === 0) {