From 17416cb5350826fdb9a143d1dec7487527e60938 Mon Sep 17 00:00:00 2001 From: Matt Wright Date: Tue, 21 Aug 2012 18:55:42 -0400 Subject: [PATCH] Always encrypt password when creating a user --- flask_security/forms.py | 4 ++-- flask_security/script.py | 3 ++- 2 files changed, 4 insertions(+), 3 deletions(-) diff --git a/flask_security/forms.py b/flask_security/forms.py index 607645f..f23ccba 100644 --- a/flask_security/forms.py +++ b/flask_security/forms.py @@ -15,7 +15,7 @@ from flask.ext.wtf import Form, TextField, PasswordField, SubmitField, \ from werkzeug.local import LocalProxy from .exceptions import UserNotFoundError - +from .utils import encrypt_password # Convenient reference _datastore = LocalProxy(lambda: app.extensions['security'].datastore) @@ -131,7 +131,7 @@ class RegisterForm(Form, def to_dict(self): return dict(email=self.email.data, - password=self.password.data) + password=encrypt_password(self.password.data)) class ResetPasswordForm(Form, diff --git a/flask_security/script.py b/flask_security/script.py index ca01c93..0bf3f16 100644 --- a/flask_security/script.py +++ b/flask_security/script.py @@ -12,7 +12,7 @@ from flask import current_app from flask.ext.script import Command, Option, prompt_bool from werkzeug.local import LocalProxy -from flask_security import views +from flask_security import views, utils _datastore = LocalProxy(lambda: current_app.extensions['security'].datastore) @@ -40,6 +40,7 @@ class CreateUserCommand(Command): # sanitize role input a bit ri = re.sub(r'\s', '', kwargs['roles']) kwargs['roles'] = [] if ri == '' else ri.split(',') + kwargs['password'] = utils.encrypt_password(kwargs['password']) _datastore.create_user(**kwargs)