summaryrefslogtreecommitdiffstats
path: root/ogcp/forms
diff options
context:
space:
mode:
authorJavier Sánchez Parra <jsanchez@soleta.eu>2022-04-21 17:30:12 +0200
committerJavier Sánchez Parra <jsanchez@soleta.eu>2022-04-22 13:02:30 +0200
commitc7b0024d2405d29e5c36445b6d28af046b2213f1 (patch)
tree4987ac0135c1f264ac90b20c6d479261d45baca7 /ogcp/forms
parent1f9a3d3b4156aef3562efec41da3f2b6cc8ec74b (diff)
Add password hashing
The front-end now hashes passwords before sending them to the back-end. It uses SHA-512. This commit adds a hidden input which sends the password hash to not interfere with browsers' save password functionality. Also change passwords of the template configuration file for their hashed/digested versions.
Diffstat (limited to 'ogcp/forms')
-rw-r--r--ogcp/forms/auth.py2
1 files changed, 2 insertions, 0 deletions
diff --git a/ogcp/forms/auth.py b/ogcp/forms/auth.py
index 15534a6..c02ecc7 100644
--- a/ogcp/forms/auth.py
+++ b/ogcp/forms/auth.py
@@ -21,6 +21,8 @@ class LoginForm(FlaskForm):
)
pwd = PasswordField(
label=_l('Password'),
+ )
+ pwd_hash = HiddenField(
validators=[InputRequired()]
)
submit_btn = SubmitField(