Secure Credentials

gistfile1.scala

import java.io._
import java.security._
import org.apache.commons.codec.binary.Base64

object SecureCredentials {
	
	def isValidPassword(password: String, hashedPassword: String, passKey: String) = {

		try {
			val theHashedPassword = hash(password, passKey)
			(theHashedPassword == hashedPassword)
		} catch {
			case _ => false
		}
	}

	def generatePassword(password: String) = {

		val secureRandom = SecureRandom.getInstance("SHA1PRNG")
		val b = Array.fill[Byte](8){0}
		secureRandom.nextBytes(b)
		val key = Base64.encodeBase64String(b)
		val hashedPassword = hash(password, key)

		(hashedPassword, key)
	}

	private def hash(value: String, key: String): String = {

		val md = MessageDigest.getInstance("SHA-256")
		md.reset()
		md.update(Base64.decodeBase64(key))
		Base64.encodeBase64String(md.digest(value.getBytes("UTF-8")))
	}

}