レビュー: パスワード処理のセキュリティ

1import hashlib
2 
3def register_user(username, password):
4    """Register new user"""
5    user = {
6        "username": username,
7        "password": password
8    }
9    save_to_db(user)
10    return user
11 
12def authenticate_user(username, password):
13    """Authenticate user"""
14    user = get_from_db(username)
15    if user:
16        password_hash = hashlib.sha256(password.encode()).hexdigest()
17        stored_hash = hashlib.sha256(user["password"].encode()).hexdigest()
18        return password_hash == stored_hash
19    return False
20 
21def save_to_db(user):
22    pass
23 
24def get_from_db(username):
25    pass