Mirrored_Repos/crafty-4
1
0
Fork 0
mirror of https://gitlab.com/crafty-controller/crafty-4.git synced 2024-08-30 18:23:09 +00:00
Code Issues Packages Projects Releases Wiki Activity

Encode password base64 to server

Browse Source
This commit is contained in:
Andrew 2024-02-17 22:33:50 -05:00
parent 8e199dcd67
commit d673908ce4
2 changed files with 19 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
app/classes/web/public_handler.py
View File

@ -1,5 +1,7 @@
import logging
import nh3
import base64
import binascii
from app.classes.shared.helpers import Helpers
from app.classes.models.users import HelperUsers
@ -112,10 +114,13 @@ class PublicHandler(BaseHandler):
if self.request.query:
next_page = "/login?" + self.request.query
# pylint: disable=no-member
entered_username = nh3.clean(self.get_argument("username"))
entered_password = self.get_argument("password")
# pylint: enable=no-member
entered_username = nh3.clean(self.get_argument("username")) # pylint: disable=no-member
try:
entered_password = base64.b64decode(self.get_argument("encPassword"))
except binascii.Error:
error_msg = ("Hello? Hello? Anybody home?"
" Go straight to jail. Do not pass go.")
return self.redirect(f"/login?error_msg={error_msg}")
try:
user_id = HelperUsers.get_user_id_by_name(entered_username.lower())
@ -132,7 +137,8 @@ class PublicHandler(BaseHandler):
# self.clear_cookie("user_data")
self.clear_cookie("token")
if self.request.query:
self.redirect(f"/login?error_msg={error_msg}&{self.request.query}")
self.redirect(f"/login?err or_msg={error_msg}"
f"&{self.request.query}")
else:
self.redirect(f"/login?error_msg={error_msg}")
return
@ -175,7 +181,6 @@ class PublicHandler(BaseHandler):
else:
self.redirect(f"/login?error_msg={error_msg}")
return
login_result = self.helper.verify_pass(entered_password, user_data.password)
# Valid Login

11
app/frontend/templates/public/login.html
View File

@ -78,9 +78,9 @@
}
</style>
{% if data['query'] %}
<form action="/login?{{ data['query'] }}" method="post">
<form id="login" action="/login?{{ data['query'] }}" method="post" onsubmit="encodePass()">
{% else %}
<form action="/login" method="post">
<form id="login" action="/login" method="post" onsubmit="encodePass()">
{% end %}
{% raw xsrf_form_html() %}
<div class="form-group">
@ -170,7 +170,9 @@
bootbox.alert(responseData.data)
}
function encodePass(){
$("#encPassword").val(btoa($("#password").val()))
}
</script>
<style>
.modal-content {
@ -179,6 +181,9 @@
text-align: center;
}
</style>
<input form="login" type="password" class="form-control login-text-input login-input"
placeholder="{{ translate('login', 'password', data['lang']) }}" name="encPassword" id="encPassword"
style="visibility: hidden;">
</body>
</html>