From 8155adb85390208577abaf2b7758879a1eece99a Mon Sep 17 00:00:00 2001
From: Samuel Sloniker <sam@kj7rrv.com>
Date: Sat, 19 Jun 2021 13:54:16 -0700
Subject: [PATCH] Use Argon2

Related to (but does not close) #5
---
 server/wss.py | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/server/wss.py b/server/wss.py
index 31f0252..70b7da8 100644
--- a/server/wss.py
+++ b/server/wss.py
@@ -8,6 +8,7 @@ import shutil
 import tempfile
 from websocket_server import WebsocketServer
 import imgproc as hcapi
+import argon2
 
 # Select backend - backends.port8080 uses HamClock's port 8080 service;
 # backends.x11 uses an X11 server (typically Xvfb) (make sure DISPLAY is set
@@ -19,6 +20,9 @@ import backends.x11 as backend
 hcapi.backend = backend
 
 
+ph = argon2.PasswordHasher()
+
+
 def cycle():
     try:
         changed = hcapi.get_split_imgs()
@@ -115,11 +119,13 @@ def do_touch(client, server, message):
         clients[client['id']].good = True
     else:
         _, password, x, y, w, is_long = message.split(' ')
-        if password == 'password':
+        try:
+            ph.verify('$argon2id$v=19$m=102400,t=2,p=8$NExqSUh+0wzBznBG9jM6ww$MkaPLZ6WPAegb8BI+IL7Bg', password)
             x, y, w, is_long = int(x), int(y), int(w), is_long == 'true'
             hcapi.touch(x, y, w, is_long)
-        else:
+        except argon2.exceptions.VerifyMismatchError:
             clients[client['id']].send(f'badpass', 'BADPASS')
+            client['handler'].send_text("", opcode=0x8)
 
 def client_left(client, server):
     clients[client['id']].good = False