mirror of
https://github.com/devproje/balance-application.git
synced 2024-10-20 15:11:21 +00:00
HOTFIX: fix security issue
This commit is contained in:
parent
98cc3edf93
commit
ed35341316
1 changed files with 1 additions and 1 deletions
|
@ -10,7 +10,7 @@ def login(auth: Credential, resp: Response):
|
|||
data = service.read(auth.username)
|
||||
|
||||
hashed = hash(auth.password, data.salt)
|
||||
if not data.username == auth.username and not data.password == hashed:
|
||||
if data.username != auth.username or data.password != hashed:
|
||||
resp.status_code = 401
|
||||
return {
|
||||
"ok": 0,
|
||||
|
|
Loading…
Reference in a new issue