CIRCL
/
lookyloo
mirror of https://github.com/CIRCL/lookyloo
2
0
Fork 0
Code Issues Releases Wiki Activity

add: validate username at login

pull/912/head
Antonia Koch 2024-05-02 13:24:47 +02:00 committed by GitHub
parent 5ab46abb21
commit 10f0adb7a5
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
website/web/__init__.py
View File

@ -53,7 +53,7 @@ else:
all_timezones_set = available_timezones() all_timezones_set = available_timezones()
from .genericapi import api as generic_api from .genericapi import api as generic_api
from .helpers import (User, build_users_table, get_secret_key, from .helpers import (User, valid_username, build_users_table, get_secret_key,
load_user_from_request, src_request_ip, sri_load, load_user_from_request, src_request_ip, sri_load,
get_lookyloo_instance) get_lookyloo_instance)
from .proxied import ReverseProxied from .proxied import ReverseProxied
@ -107,6 +107,9 @@ def login() -> WerkzeugResponse | str | Response:
''' '''
username = request.form['username'] username = request.form['username']
if not valid_username(username):
flash('User is not permitted.', 'error')
return redirect(url_for('login'))
users_table = build_users_table() users_table = build_users_table()
if username in users_table and check_password_hash(users_table[username]['password'], request.form['password']): if username in users_table and check_password_hash(users_table[username]['password'], request.form['password']):
user = User() user = User()