Lenaisten/advent22
1
0
Fork 0
mirror of https://code.lenaisten.de/Lenaisten/advent22.git synced 2024-11-22 15:53:01 +00:00
Code Issues Projects Releases Packages Wiki Activity

user name case sensitivity

Browse source
This commit is contained in:
Jörn-Michael Miehe 2023-11-21 22:54:37 +01:00
parent 489d64414e
commit a86e47113c
2 changed files with 9 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
Ideen.md
View file

@ -1,6 +1,5 @@
# MUSS # MUSS
- api: admin Login case sensitivity (username "admin" == "AdMiN")
- api: Config-Liste von Extra-Türchen (kein Buchstabe, nur manuelles Bild) - api: Config-Liste von Extra-Türchen (kein Buchstabe, nur manuelles Bild)
- api: Config-Option "Überspringe leere Türchen" (standard ja) - api: Config-Option "Überspringe leere Türchen" (standard ja)
@ -20,3 +19,4 @@
- Option "Leerzeichen ignorieren" (standard ja) - Option "Leerzeichen ignorieren" (standard ja)
- Nach einigen Sekunden: Meldung "Türchen anzeigen?" - Nach einigen Sekunden: Meldung "Türchen anzeigen?"
- `alert` durch bulma Komponente(n) ersetzen - `alert` durch bulma Komponente(n) ersetzen
- api: admin Login case sensitivity (username "admin" == "AdMiN")

10
api/advent22_api/routers/_security.py
View file

@ -19,8 +19,14 @@ async def user_is_admin(
True iff der user "admin" ist True iff der user "admin" ist
""" """
username_correct = secrets.compare_digest(credentials.username, cfg.admin.name) username_correct = secrets.compare_digest(
password_correct = secrets.compare_digest(credentials.password, cfg.admin.password) credentials.username.lower(),
cfg.admin.name.lower(),
)
password_correct = secrets.compare_digest(
credentials.password,
cfg.admin.password,
)
return username_correct and password_correct return username_correct and password_correct