1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
|
# Copyright (C) 2012-2016 by the Free Software Foundation, Inc.
#
# This file is part of GNU Mailman.
#
# GNU Mailman is free software: you can redistribute it and/or modify it under
# the terms of the GNU General Public License as published by the Free
# Software Foundation, either version 3 of the License, or (at your option)
# any later version.
#
# GNU Mailman is distributed in the hope that it will be useful, but WITHOUT
# ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
# FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
# more details.
#
# You should have received a copy of the GNU General Public License along with
# GNU Mailman. If not, see <http://www.gnu.org/licenses/>.
"""A wrapper around passlib."""
from mailman import public
from mailman.config.config import load_external
from mailman.interfaces.configuration import ConfigurationUpdatedEvent
from passlib.context import CryptContext
class PasswordContext:
def __init__(self, config):
"""Create a password context for hashing and verification.
:param config: The `IConfiguration` instance.
"""
config_string = load_external(config.passwords.configuration)
self._context = CryptContext.from_string(config_string)
def encrypt(self, secret):
"""Return the secret, hashed using the current password context.
:param secret: The plain text password.
:type secret: string
:return: The hashed secret.
:rtype: string
"""
return self._context.encrypt(secret)
def verify(self, password, hashed):
"""Verify the hashed password and return the updated hash.
This is essentially a wrapper around
`passlib.CryptContext.verify_and_update()` using only the first two
arguments.
:param password: The plain text secret provided by the user.
:type password:
:param hashed: The hash string to compare to.
:type hashed: string
:return: 2-tuple where the first element is a flag indicating whether
the password verified or not, and the second value whether the
existing hash needs to be replaced (a str if so, else None).
:rtype: 2-tuple
"""
return self._context.verify_and_update(password, hashed)
@public
def handle_ConfigurationUpdatedEvent(event):
if isinstance(event, ConfigurationUpdatedEvent):
# Just reset the password context.
event.config.password_context = PasswordContext(event.config)
|
