SchoolGuy/ticketfrei
1
0
Fork 0
forked from ticketfrei/ticketfrei
Code Issues Pull requests Releases Wiki Activity

better crypto

Browse source
This commit is contained in:
b3yond 2019-01-27 17:53:37 +01:00
parent 2a90573d5e
commit 6b52a6303a
1 changed files with 2 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
user.py
View file

@ -4,7 +4,7 @@ from db import db
import jwt import jwt
from mastodon import Mastodon from mastodon import Mastodon
from pylibscrypt import scrypt_mcf, scrypt_mcf_check from pylibscrypt import scrypt_mcf, scrypt_mcf_check
from random import choice from os import urandom
class User(object): class User(object):
@ -17,8 +17,7 @@ class User(object):
def get_csrf(self): def get_csrf(self):
csrf_token = request.get_cookie('csrf', secret=db.get_secret()) csrf_token = request.get_cookie('csrf', secret=db.get_secret())
if not csrf_token: if not csrf_token:
allchar = "0123456789" csrf_token = str(urandom(32))
csrf_token = "".join(choice(allchar) for x in range(32))
return csrf_token return csrf_token
def check_password(self, password): def check_password(self, password):