Hash user's password to handle special chars

HarborWallet · May 31, 2024 · a10bc6a · a10bc6a
1 parent 344df1c
commit a10bc6a
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/src/db.rs b/src/db.rs
@@ -3,6 +3,8 @@ use crate::db_models::{
     Fedimint, LightningPayment, LightningReceive, NewFedimint, NewProfile, OnChainPayment,
     OnChainReceive, Profile,
 };
+use bitcoin::hashes::hex::ToHex;
+use bitcoin::hashes::{sha256, Hash};
 use bitcoin::{Address, Txid};
 use diesel::{
     connection::SimpleConnection,
@@ -377,8 +379,8 @@ impl diesel::r2d2::CustomizeConnection<SqliteConnection, diesel::r2d2::Error>
 {
     fn on_acquire(&self, conn: &mut SqliteConnection) -> Result<(), diesel::r2d2::Error> {
         (|| {
-            // FIXME: Special characters might fuck up
-            conn.batch_execute(&format!("PRAGMA key={}", self.key))?;
+            let hashed_password = sha256::Hash::hash(self.key.as_bytes());
+            conn.batch_execute(&format!("PRAGMA key={}", hashed_password.to_hex()))?;
             if self.enable_wal {
                 conn.batch_execute("PRAGMA journal_mode = WAL; PRAGMA synchronous = NORMAL;")?;
             }