go - 我的 bcrypt 密码验证总是失败，说 hashedPassword 不是给定 passwordPASS 的散列

Question

func validateCredentials(attemptedPassword string, actualPasswordHash string) (bool, error) {
    if err := bcrypt.CompareHashAndPassword([]byte(actualPasswordHash), []byte(attemptedPassword)); err != nil {
        fmt.Printf("validateCredentials error is %v", err)
        return false, nil
    }

    return true, nil
}

我编写了一个如下所示的测试:

func TestAuth_validateCredentials(t *testing.T) {
    var actualPassword = "hello123"
    actualPasswordHash, _ := bcrypt.GenerateFromPassword([]byte(actualPassword), bcrypt.MinCost)
    if valid, err := validateCredentials("username", string(actualPasswordHash)); err != nil {
        t.Error("Unexpted error: ", err)
    } else if valid {
        t.Error("Expected invalid when password is wrong")
    }
}

我一直收到这个错误:

validateCredentials error is crypto/bcrypt: hashedPassword is not the hash of the given passwordPASS

我在这里做错了什么？

Answer 1

您传递的是 "username" 而不是 actualPassword

if valid, err := validateCredentials(actualPassword, string(actualPasswordHash))