wassname/flask-security
1
0
Fork 0
mirror of https://github.com/wassname/flask-security.git synced 2026-09-10 12:01:01 +08:00
Code Issues Packages Projects Releases Wiki Activity

Add configured password hash test back and fix bug with checking passwords

Browse Source
This commit is contained in:
Matt Wright
2014-01-14 10:34:57 -05:00
parent 76fc578cf5
commit 35fd08772b
2 changed files with 16 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files
flask_security/utils.py
+6 -3
View File
@@ -121,7 +121,10 @@ def verify_and_update_password(password, user):
:param password: A plaintext password to verify
:param user: The user to verify against
"""
verified, new_password = _pwd_context.verify_and_update(encrypt_password(password), user.password)
if _security.password_hash != 'plaintext':
password = get_hmac(password)
verified, new_password = _pwd_context.verify_and_update(password, user.password)
if verified and new_password:
user.password = new_password
_datastore.put(user)
@@ -135,8 +138,8 @@ def encrypt_password(password):
"""
if _security.password_hash == 'plaintext':
return password
signed = get_hmac(password)
return _pwd_context.encrypt(signed.decode('ascii'))
signed = get_hmac(password).decode('ascii')
return _pwd_context.encrypt(signed)
def md5(data):