wrap argon2 verify with exception catcher

OpenSlides · Nov 30, 2023 · 1727053 · 1727053
1 parent ead954f
commit 1727053
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/auth/libraries/pip-auth/authlib/hashing_handler.py b/auth/libraries/pip-auth/authlib/hashing_handler.py
@@ -10,4 +10,11 @@ def hash(self, to_hash: str, hash_reference: Optional[str] = None) -> str:
 
     def verify(self, hash: str, password: str) -> bool:
         ph = argon2.PasswordHasher()
-        return ph.verify(hash, password)
+        try:
+            return ph.verify(hash, password)
+        except (
+            argon2.exceptions.VerifyMismatchError,
+            argon2.exceptions.VerificationError,
+            argon2.exceptions.InvalidHashError,
+        ):
+            return False