wassname/flask-security
1
0
Fork 0
mirror of https://github.com/wassname/flask-security.git synced 2026-08-12 12:00:37 +08:00
Code Issues Packages Projects Releases Wiki Activity

Changing verify_password so it works like verify_and_update_password. Currently verify_password was not only creating a hmac hash but also encrypting (encrypt_password is first hmac-signing and then encrypting).

Browse Source 
Removed unneccessary and wrong tests.
This commit is contained in:
Ahti Kitsik
2014-02-20 16:46:49 +02:00
parent 0268a2d568
commit 1395df334e
2 changed files with 17 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
flask_security/utils.py
+4 -1
View File
@@ -111,7 +111,10 @@ def verify_password(password, password_hash):
:param password: A plaintext password to verify
:param password_hash: The expected hash value of the password (usually form your database)
"""
return _pwd_context.verify(encrypt_password(password), password_hash)
if _security.password_hash != 'plaintext':
password = get_hmac(password)
return _pwd_context.verify(password, password_hash)
def verify_and_update_password(password, user):