Function hashAPIKey

database/api_key.go:23–29

hashAPIKey creates a bcrypt hash of the API key for secure storage. bcrypt includes salt and is resistant to brute-force attacks.

(key string)

// hashAPIKey creates a bcrypt hash of the API key for secure storage.
// bcrypt includes salt and is resistant to brute-force attacks.
func hashAPIKey(key string) (string, error) {
	hash, err := bcrypt.GenerateFromPassword([]byte(key), bcrypt.DefaultCost)
	if err != nil {
		return "", err
	}
	return string(hash), nil
}

// verifyAPIKey compares a plaintext key with a bcrypt hash.
func verifyAPIKey(hashedKey, plainKey string) bool {