nik/FreedomBox
1
0
Fork 0
mirror of https://github.com/freedombox/FreedomBox.git synced 2026-08-26 12:46:08 +00:00
Code Issues Packages Projects Releases Wiki Activity

Make sure login do not throw exception for unknown users.

Browse Source
This commit is contained in:
Petter Reinholdtsen 2013-09-26 20:04:27 +02:00
parent 0954d9d383
commit 6630a8f3d5
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
modules/installed/lib/auth.py
View File

@ -27,7 +27,10 @@ def check_credentials(username, passphrase):
cfg.log(error) cfg.log(error)
return error return error
u = cfg.users[username] if username in cfg.users:
u = cfg.users[username]
else:
u = None
# hash the password whether the user exists, to foil timing # hash the password whether the user exists, to foil timing
# side-channel attacks # side-channel attacks
pass_hash = hashlib.md5(passphrase).hexdigest() pass_hash = hashlib.md5(passphrase).hexdigest()