From ac18508b28dd918a341ebd8c4ef2229b56ad328c Mon Sep 17 00:00:00 2001
From: NexusNull
Date: Wed, 18 Oct 2023 00:43:32 +0200
Subject: [PATCH] Update api.py
Remove check for unhashed passwords.
---
api.py | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/api.py b/api.py
index baccc96..7f61db6 100644
--- a/api.py
+++ b/api.py
@@ -22,7 +22,7 @@ def signup_or_login_api(**args):
if not domain.electron and not only_login and not domain.is_sdk: jhtmle(self,"Can't signup on web"); return
if existing and not only_signup:
- if existing.password==password or existing.password==hash_password(password,gf(existing,"salt","5")):
+ if existing.password==hash_password(password,gf(existing,"salt","5")):
def login_transaction():
user=get_by_iid(existing.k('i'))
auth=get_new_auth(self,user,domain)
@@ -1735,4 +1735,4 @@ class APICall(webapp.RequestHandler):
application = webapp.WSGIApplication([
('/api.*',APICall),
- ],debug=is_sdk)
\ No newline at end of file
+ ],debug=is_sdk)