check bcrypted passwords

Author: donpdonp

Gemfile

@@ -11,7 +11,7 @@ gem 'couchrest_model', '~> 1.1.0'
 gem 'sqlite3' # to keep ActiveRecord happy
 gem 'omniauth'
 gem 'oauth2'
-gem 'bcrypt-ruby'
+gem 'bcrypt-ruby', :require => 'bcrypt'
 gem 'slim'
 gem 'riemann-client'
 

app/controllers/sessions_controller.rb

@@ -22,7 +22,7 @@ def create
       if params[:password].nil?
         response.merge!(:status => "NEEDPASS")
       else
-        if params[:password] == user.password
+        if user.authentic?(params[:password])
           session[:logged_in_user] = user.username
           RIEMANN << {service:'icecondor user', tags:['login'],
                       description:"user: #{user.username}"}

app/models/user.rb

@@ -42,4 +42,7 @@ def self.build_initial_locations(usernames, count)
     end
   end
 
+  def authentic?(pass)
+    BCrypt::Password.new(password) == pass
+  end
 end