Spaces:

VioletWizard
/

Talk-Trace-AI

Runtime error

Claude

fix: 평문 비밀번호 비교 fallback 제거 (보안 강화)

1296cbb unverified 5 months ago

441 Bytes

import bcrypt


def _hash_password(plain: str) -> str:
    return bcrypt.hashpw(plain.encode(), bcrypt.gensalt()).decode()


def _is_hashed(stored: str) -> bool:
    return stored.startswith(("$2b$", "$2a$"))


def _verify_password(plain: str, stored: str) -> bool:
    if _is_hashed(stored):
        try:
            return bcrypt.checkpw(plain.encode(), stored.encode())
        except Exception:
            return False
    return False

	import bcrypt


	def _hash_password(plain: str) -> str:
	return bcrypt.hashpw(plain.encode(), bcrypt.gensalt()).decode()


	def _is_hashed(stored: str) -> bool:
	return stored.startswith(("$2b$", "$2a$"))


	def _verify_password(plain: str, stored: str) -> bool:
	if _is_hashed(stored):
	try:
	return bcrypt.checkpw(plain.encode(), stored.encode())
	except Exception:
	return False
	return False