New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

For migrating password format from `werkzeug.security` to `passlib`, new hashes should be saved after verification #14

Open

brassy-endomorph opened this issue Jan 22, 2024 · 0 comments

Collaborator

brassy-endomorph commented Jan 22, 2024

frontpage/frontpage/models.py

Lines 39 to 45 in 0e1ae83

 def check_password(self, password): 

 try: 

 # First, try to verify the password with Passlib 

 return pwd_context.verify(password, self.password_hash) 

 except ValueError: 

 # If it fails (old hash), fall back to Werkzeug's method 

 return check_password_hash(self.password_hash, password)

This allows us a path to removing this logic eventually

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment