Flaschengeist/flaschengeist
Flaschengeist
/
flaschengeist
7
0
Fork 0
Code Issues 20 Pull Requests Packages Projects Releases 2 Wiki Activity

[Plugin]auth: Fixed possible issue with POST paramenters on login

This commit is contained in:
Ferdinand Thiessen 2020-11-18 02:48:44 +01:00
parent 4a4930d683
commit 737dd9d5cf
2 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
flaschengeist/models/user.py
View File

@ -68,7 +68,7 @@ class User(db.Model, ModelSerializeMixin):
@property @property
def avatar_url(self): def avatar_url(self):
return url_for('users.get_avatar', userid=self.userid) return url_for("users.get_avatar", userid=self.userid)
@property @property
def roles(self): def roles(self):

6
flaschengeist/plugins/auth/__init__.py
View File

@ -34,9 +34,9 @@ def login():
logger.debug("Start log in.") logger.debug("Start log in.")
data = request.get_json() data = request.get_json()
try: try:
userid = data["userid"] userid = str(data["userid"])
password = data["password"] password = str(data["password"])
except (KeyError, ValueError): except (KeyError, ValueError, TypeError):
raise BadRequest("Missing parameter(s)") raise BadRequest("Missing parameter(s)")
logger.debug("search user {{ {} }} in database".format(userid)) logger.debug("search user {{ {} }} in database".format(userid))