wassname/flask-security
1
0
Fork 0
mirror of https://github.com/wassname/flask-security.git synced 2026-09-09 11:22:35 +08:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #193 from nickretallack/develop

Browse Source 
Fix attempts to log in without a password, or without confirming your email
This commit is contained in:
Matt Wright
2013-12-19 11:39:47 -08:00
parent af8e9f7ca5 1596ef75d4
commit ce439b7fec
3 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
flask_security/forms.py
+3
View File
@@ -228,6 +228,9 @@ class LoginForm(Form, NextFormMixin):
if self.user is None:
self.email.errors.append(get_message('USER_DOES_NOT_EXIST')[0])
return False
if not self.user.password:
self.password.errors.append(get_message('PASSWORD_NOT_SET')[0])
return False
if not verify_and_update_password(self.password.data, self.user):
self.password.errors.append(get_message('INVALID_PASSWORD')[0])
return False