Commit f0d81570 authored by okhin's avatar okhin 🚴

Reverting hashing tokens … they're already hashed by the JWT process anyway

parent fc031ca7
Pipeline #950 passed with stage
in 4 seconds
...@@ -12,7 +12,6 @@ import configparser ...@@ -12,7 +12,6 @@ import configparser
import argparse import argparse
import os.path import os.path
import sys import sys
import hashlib
from operator import itemgetter from operator import itemgetter
import jwt import jwt
...@@ -496,7 +495,7 @@ def login_admin(user, password): ...@@ -496,7 +495,7 @@ def login_admin(user, password):
if user is None: if user is None:
# user does not exist # user does not exist
return False return False
if hashlib.sha256(password.encode()).hexdigest() != user[1]: if password.encode != user[1]:
# password does not match # password does not match
return False return False
if user[2] == 0: if user[2] == 0:
...@@ -520,7 +519,7 @@ def little_admin(): ...@@ -520,7 +519,7 @@ def little_admin():
def medium_admin(): def medium_admin():
db = sqlite3.connect(config['piphone']['db']) db = sqlite3.connect(config['piphone']['db'])
api = request.forms.get('api') api = request.forms.get('api')
token = hashlib.sha256(request.forms.get('api_token').encode()).hexdigest() token = request.forms.get('api_token')
admin = request.forms.get('admin') admin = request.forms.get('admin')
action = request.forms.get('action') action = request.forms.get('action')
pattern = request.forms.get('pattern') pattern = request.forms.get('pattern')
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment