Merge pull request #135 from ISE-GenAI-TechX25-Section-D/hashingPasswords

Added hashing

Author: diegoperez-techex

bq_scripts/createUsersbackup.py

@@ -0,0 +1,15 @@
+from google.cloud import bigquery
+
+def backup_users_table():
+    client = bigquery.Client()
+
+    source_table = "diegoperez16techx25.Committees.Users"
+    backup_table = "diegoperez16techx25.Committees.Users_backup"
+
+    job = client.copy_table(source_table, backup_table)
+
+    job.result()  # Wait for the job to complete
+
+    print("✅ Backup complete: Users → Users_backup")
+
+backup_users_table()

bq_scripts/hash_existing_passwords.py

@@ -0,0 +1,37 @@
+from google.cloud import bigquery
+import bcrypt
+
+def hash_existing_passwords():
+    client = bigquery.Client()
+
+    # Step 1: Fetch users with unhashed passwords (assumes hash is > 60 chars)
+    query = """
+    SELECT UserId, Password
+    FROM `diegoperez16techx25.Committees.Users`
+    WHERE LENGTH(Password) < 60
+    """
+    results = client.query(query).result()
+
+    updated_count = 0
+
+    for row in results:
+        user_id = row.UserId
+        plain_pw = row.Password
+
+        # Step 2: Hash password
+        hashed_pw = bcrypt.hashpw(plain_pw.encode('utf-8'), bcrypt.gensalt()).decode('utf-8')
+
+        # Step 3: Update the user's password
+        update_query = f"""
+        UPDATE `diegoperez16techx25.Committees.Users`
+        SET Password = '{hashed_pw}'
+        WHERE UserId = '{user_id}'
+        """
+        client.query(update_query).result()
+        updated_count += 1
+        print(f"✅ Hashed password for {user_id}")
+
+    print(f"🔐 Done! {updated_count} user passwords were hashed.")
+
+if __name__ == "__main__":
+    hash_existing_passwords()

generated_advice_images/motivation_963f2b49c22647569a2a447168edff8c.png

@@ -14,6 +14,7 @@
 import pandas as pd
 from google.cloud import bigquery
 from datetime import datetime, date
+import bcrypt
 
 # This one has been written for you as an example. You may change it as wanted.
 def display_my_custom_component(value):
@@ -226,15 +227,19 @@ def display_genai_advice(
 
     streamlit_module.caption(f"Last updated: {timestamp}")
 
+import bcrypt  # 🔐 Add this at the top of your file
+
 def login_box():
+    def check_password(plain_password, hashed_password):
+        return bcrypt.checkpw(plain_password.encode(), hashed_password.encode())
+
     sl.subheader("🔐 Login")
 
     username = sl.text_input("Username")
     password = sl.text_input("Password", type="password")
 
     login_button = sl.button("Log In")
 
-
     if login_button:
         if not username or not password:
             sl.warning("Please enter both username and password.")
@@ -248,25 +253,24 @@ def login_box():
             sl.error("User not found.")
             return False
 
-        if password != expected_password:
+        if not check_password(password, expected_password):
             sl.error("Incorrect password.")
             return False
 
         sl.success(f"Welcome back, {user_info['full_name']}!")
         sl.session_state.userId = userID
         sl.rerun()
-        return True  # Can be used to set session state or display more info
+        return True
 
     return None
 
+
 def signup_box():
     sl.subheader("📝 Sign Up")
 
-    # Check for submitted state
     if "signup_submitted" not in sl.session_state:
         sl.session_state.signup_submitted = False
 
-    # If already submitted, show success and login button
     if sl.session_state.signup_submitted:
         sl.success("✅ Account created successfully!")
         if sl.button("Go to Login"):
@@ -278,10 +282,10 @@ def signup_box():
     first_name = sl.text_input("First Name")
     last_name = sl.text_input("Last Name")
     dob = sl.date_input(
-    "Date of Birth",
-    value=date(2000, 1, 1),
-    min_value=date(1900, 1, 1),
-    max_value=datetime.today().date()
+        "Date of Birth",
+        value=date(2000, 1, 1),
+        min_value=date(1900, 1, 1),
+        max_value=datetime.today().date()
     )
     username = sl.text_input("Username")
     image_url = sl.text_input("Profile Image URL (optional)")
@@ -291,7 +295,6 @@ def signup_box():
     signup_button = sl.button("Create Account")
 
     if signup_button:
-        # Validate required fields
         if not all([first_name, last_name, dob, username, password, confirm_password]):
             sl.warning("Please fill in all required fields.")
             return None
@@ -304,15 +307,17 @@ def signup_box():
             sl.error("Username already taken.")
             return None
 
+
+        hashed_password = bcrypt.hashpw(password.encode(), bcrypt.gensalt()).decode('utf-8')
+
         full_name = f"{first_name} {last_name}"
 
         create_new_user(
             username=username,
             name=full_name,
             image_url=image_url,
             date_of_birth=str(dob),
-            password=password
-            
+            password=hashed_password  
         )
 
         sl.success("Account created! You can now log in.")

modules.py

@@ -6,4 +6,5 @@ datetime
 google-cloud-aiplatform==1.69.0
 python-dotenv==1.0.1
 Pillow==11.1.0
-streamlit-option-menu
+streamlit-option-menu
+bcrypt