colin/colibre
1
0
Fork 0
Code Issues 30 Pull Requests Actions Packages Projects Releases 33 Activity

fix(auth): null password_hash pour utilisateurs OAuth (#88)

Browse Source 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Colin Maudry
2026-06-24 23:27:15 +02:00
parent aac3753226
commit 5a702ac77e
3 changed files with 14 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/auth/routes.py
+8 -2
View File
@@ -100,7 +100,9 @@ def login():
check_password_hash(_DUMMY_HASH, password) # uniformiser le temps
return _redirect_with_error("/connexion", "invalid_credentials", email)
if not check_password_hash(row["password_hash"], password):
if row["password_hash"] is None or not check_password_hash(
row["password_hash"], password
):
return _redirect_with_error("/connexion", "invalid_credentials", email)
if not row["email_verified"]:
@@ -177,6 +179,8 @@ def change_password():
password_confirm = request.form.get("password_confirm") or ""
row = db.get_user_by_id(current_user.id)
if row["password_hash"] is None:
return _redirect_with_error("/compte/admin", "no_password_set")
if not check_password_hash(row["password_hash"], current_pw):
return _redirect_with_error("/compte/admin", "invalid_current_password")
@@ -231,7 +235,9 @@ def confirm_email_change():
def delete_account():
current_pw = request.form.get("current_password") or ""
row = db.get_user_by_id(current_user.id)
if not check_password_hash(row["password_hash"], current_pw):
if row["password_hash"] is not None and not check_password_hash(
row["password_hash"], current_pw
):
return _redirect_with_error("/compte/admin", "invalid_current_password")
user_id = current_user.id