import other kontor repos into directories

bottle/userDAO.py

@@ -0,0 +1,77 @@
+# -*- coding: utf-8 -*-
+
+import hmac
+import random
+import string
+import hashlib
+import pymongo
+
+
+# The User Data Access Object handles all interactions with the User collection.
+class UserDAO:
+
+    def __init__(self, db):
+        self.db = db
+        self.users = self.db.users
+        self.SECRET = 'verysecret'
+
+    # makes a little salt
+    def make_salt(self):
+        salt = ""
+        for i in range(5):
+            salt = salt + random.choice(string.ascii_letters)
+        return salt
+
+    # implement the function make_pw_hash(name, pw) that returns a hashed password
+    # of the format:
+    # HASH(pw + salt),salt
+    # use sha256
+
+    def make_pw_hash(self, pw,salt=None):
+        if salt == None:
+            salt = self.make_salt();
+        return hashlib.sha256(pw + salt).hexdigest()+","+ salt
+
+    # Validates a user login. Returns user record or None
+    def validate_login(self, username, password):
+
+        user = None
+        try:
+            user = self.users.find_one({'_id': username})
+        except:
+            print "Unable to query database for user"
+
+        if user is None:
+            print "User not in database"
+            return None
+
+        salt = user['password'].split(',')[1]
+
+        if user['password'] != self.make_pw_hash(password, salt):
+            print "user password is not a match"
+            return None
+
+        # Looks good
+        return user
+
+
+    # creates a new user in the users collection
+    def add_user(self, username, password, email):
+        password_hash = self.make_pw_hash(password)
+
+        user = {'_id': username, 'password': password_hash}
+        if email != "":
+            user['email'] = email
+
+        try:
+            self.users.insert_one(user)
+        except pymongo.errors.OperationFailure:
+            print "oops, mongo error"
+            return False
+        except pymongo.errors.DuplicateKeyError as e:
+            print "oops, username is already taken"
+            return False
+
+        return True
+
+