Add support for hashing operator passwords in the config.

Closes #327.

1 files changed, 16 insertions, 1 deletions

diff --git a/modules/operserv/os_login.cpp b/modules/operserv/os_login.cpp
index f453bd8f0..21c5897f6 100644
--- a/modules/operserv/os_login.cpp
+++ b/modules/operserv/os_login.cpp
@@ -10,10 +10,25 @@
  */
 
 #include "module.h"
+#include "modules/encryption.h"
 
 class CommandOSLogin final
 	: public Command
 {
+private:
+	bool ComparePassword(const Oper *o, const Anope::string &password)
+	{
+		if (o->password_hash.empty())
+			return o->password.equals_cs(password); // Plaintext password.
+
+		auto *service = Service::FindService("Encryption::Provider", o->password_hash);
+		if (!service)
+			return false; // Malformed hash.
+
+		auto *hashprov = static_cast<Encryption::Provider *>(service);
+		return hashprov->Compare(o->password, password);
+	}
+
 public:
 	CommandOSLogin(Module *creator) : Command(creator, "operserv/login", 0, 1)
 	{
@@ -31,7 +46,7 @@ public:
 			source.Reply(_("Your oper block doesn't require logging in."));
 		else if (u->HasExt("os_login"))
 			source.Reply(_("You are already identified."));
-		else if (params.empty() || o->password != params[0])
+		else if (params.empty() || !ComparePassword(o, params[0]))
 		{
 			source.Reply(PASSWORD_INCORRECT);
 			u->BadPassword();