mirror of
https://github.com/devproje/balance-application.git
synced 2024-10-20 15:11:21 +00:00
HOTFIX: fix security issue
This commit is contained in:
parent
98cc3edf93
commit
ed35341316
1 changed files with 1 additions and 1 deletions
|
@ -10,7 +10,7 @@ def login(auth: Credential, resp: Response):
|
||||||
data = service.read(auth.username)
|
data = service.read(auth.username)
|
||||||
|
|
||||||
hashed = hash(auth.password, data.salt)
|
hashed = hash(auth.password, data.salt)
|
||||||
if not data.username == auth.username and not data.password == hashed:
|
if data.username != auth.username or data.password != hashed:
|
||||||
resp.status_code = 401
|
resp.status_code = 401
|
||||||
return {
|
return {
|
||||||
"ok": 0,
|
"ok": 0,
|
||||||
|
|
Loading…
Reference in a new issue