Example: How to set up a password hashing routine for an Entity / ActiveModel

[mohs8421]

Hi,

I'm new to sea-orm, and just setting up a new system.
Obviously I need some kind of login and want to set it up nicely in the user entity.
Currently it looks like this, but I am unsure if this is the best way to go, and it seems to not to be utilizing the features of sea-orm properly:

impl ActiveModel {
    pub fn hash_password(password: &str) -> String {
        let argon2 = Argon2::default();
        argon2
            .hash_password(password.as_bytes(), &SaltString::generate(OsRng))
            .expect("Generating password hash failed.")
            .to_string()
    }

    pub fn set_password(&mut self, password: &str) {
        self.password = ActiveValue.Set(self::hash_password(password));
    }
}

So how would this look like if done right?

[billy1624]

Hey @mohs8421, welcome! You can use the before_save hook in ActiveModelBehavior. See https://www.sea-ql.org/SeaORM/docs/generate-entity/expanded-entity-structure#active-model-behavior

[billy1624]

Try new_user.insert(db)

[mohs8421]

interesting loophole, isn't this a bug?

[billy1624]

entity::user::Entity::insert operate on the executor level which doesn't support event hook

[fcoury]

Wow, wasted maybe 5 hours of my life on this. Would be nice to have a note about this somewhere in the documentation.

Thanks @billy1624 for the answer.

[alvissraghnall]

Hey @mohs8421, welcome! You can use the before_save hook in ActiveModelBehavior. See https://www.sea-ql.org/SeaORM/docs/generate-entity/expanded-entity-structure#active-model-behavior

Doesn't this run on updates as well? If yes, say you updated an entity, it would compute an entirely different hash of the already hashed password, no?