wrap argon2 verify with exception catcher

OpenSlides · Nov 30, 2023 · 8b5cf1d · 8b5cf1d
1 parent 1127dd8
commit 8b5cf1d
Showing 1 changed file with 8 additions and 4 deletions.
diff --git a/auth/libraries/pip-auth/authlib/hashing_handler.py b/auth/libraries/pip-auth/authlib/hashing_handler.py
@@ -3,14 +3,18 @@
 import argon2
 
 
-HASH_WITH_SALT_LENGTH = 152
-
-
 class HashingHandler:
     def hash(self, to_hash: str, hash_reference: Optional[str] = None) -> str:
         ph = argon2.PasswordHasher()
         return ph.hash(to_hash)
 
     def verify(self, hash: str, password: str) -> bool:
         ph = argon2.PasswordHasher()
-        return ph.verify(hash, password)
+        try:
+            return ph.verify(hash, password)
+        except (
+            argon2.exceptions.VerifyMismatchError,
+            argon2.exceptions.VerificationError,
+            argon2.exceptions.InvalidHashError,
+        ):
+            return False