Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Superuser password login fails in Access Denied #108

Closed
sacredcrane opened this issue Jan 24, 2024 · 1 comment
Closed

Superuser password login fails in Access Denied #108

sacredcrane opened this issue Jan 24, 2024 · 1 comment
Assignees

Comments

@sacredcrane
Copy link

sacredcrane commented Jan 24, 2024

Little bug in /uds/core/util/config.py
Config method set workflow for password:
we previous encrypting value

if self._crypt:
    value = CryptoManager().encrypt(value)

and after it hashing value

if self._type == Config.FieldType.PASSWORD:
    value = CryptoManager().hash(value)

Maybe should it be

if self._crypt and self.type != Config.FieldType.PASSWORD:
@dkmstr
Copy link
Collaborator

dkmstr commented Jan 24, 2024

On 4.0, i have removed the _crypt and _longtext data, they where legacy. This is because crypted data should be controlled by other means, and passwords will always be hashes...

Thanks for your report anyway!!

(B.T.W. currently 4.0 is not usable anyway, i hope to stabilize it enough in a couple of months to start real testings)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants