aji/costapy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Validating password confirmation for sending invitation

Browse Source
This commit is contained in:
Dita Aji Pratama 2025-08-07 12:05:18 +07:00
parent 44acf5836c
commit 346fcaef77
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
modules/api/auth.py
View File

@ -254,6 +254,9 @@ class auth:
jwt = auth_header.split(' ')[1] jwt = auth_header.split(' ')[1]
payload = tokenguard.decode(jwt, globalvar.ssh['key']['public']) payload = tokenguard.decode(jwt, globalvar.ssh['key']['public'])
session_id = payload["session"]["id"] session_id = payload["session"]["id"]
loggorilla.prcss(APIADDR, "Get dependency data")
self.cursor.execute("SELECT COUNT(*) AS `count`, auth.token, auth_profile.id, auth_profile.username, auth.password FROM auth_profile INNER JOIN auth ON auth.token = auth_profile.token WHERE auth_profile.username = %s ; ", (user['profile']['username'],) )
result_login = self.cursor.fetchone()
loggorilla.prcss(APIADDR, "Account validation") loggorilla.prcss(APIADDR, "Account validation")
user_validation = procedure_validation.validation().account(APIADDR, allowed_roles, token) user_validation = procedure_validation.validation().account(APIADDR, allowed_roles, token)
user = user_validation['data'] user = user_validation['data']
@ -264,6 +267,11 @@ class auth:
loggorilla.prcss(APIADDR, "Giving response") loggorilla.prcss(APIADDR, "Giving response")
response["status" ] = "failed" response["status" ] = "failed"
response["desc" ] = "Invitation roles is not allowed" response["desc" ] = "Invitation roles is not allowed"
elif not bcrypt.checkpw(password.encode(), result_login['password'].decode().encode() ):
loggorilla.accss(APIADDR, f"{user['profile']['username']} put a wrong password for send invitation")
loggorilla.prcss(APIADDR, "Giving response")
response["status" ] = "failed"
response["desc" ] = "Incorrect password for send invitation"
else: else:
loggorilla.prcss(APIADDR, "Set expired datetime") loggorilla.prcss(APIADDR, "Set expired datetime")
expired = globalvar.invitation_link_expiration expired = globalvar.invitation_link_expiration