diff options
| author | Javier Sánchez Parra <jsanchez@soleta.eu> | 2022-04-21 17:30:12 +0200 |
|---|---|---|
| committer | Javier Sánchez Parra <jsanchez@soleta.eu> | 2022-04-22 13:02:30 +0200 |
| commit | c7b0024d2405d29e5c36445b6d28af046b2213f1 (patch) | |
| tree | 4987ac0135c1f264ac90b20c6d479261d45baca7 /ogcp/forms | |
| parent | 1f9a3d3b4156aef3562efec41da3f2b6cc8ec74b (diff) | |
Add password hashing
The front-end now hashes passwords before sending them to the back-end.
It uses SHA-512.
This commit adds a hidden input which sends the password hash to not
interfere with browsers' save password functionality.
Also change passwords of the template configuration file for their
hashed/digested versions.
Diffstat (limited to 'ogcp/forms')
| -rw-r--r-- | ogcp/forms/auth.py | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/ogcp/forms/auth.py b/ogcp/forms/auth.py index 15534a6..c02ecc7 100644 --- a/ogcp/forms/auth.py +++ b/ogcp/forms/auth.py @@ -21,6 +21,8 @@ class LoginForm(FlaskForm): ) pwd = PasswordField( label=_l('Password'), + ) + pwd_hash = HiddenField( validators=[InputRequired()] ) submit_btn = SubmitField( |