Ba2026 argon2 exception catched (#171)

OpenSlides · Nov 30, 2023 · da6d2a9 · da6d2a9
1 parent 6a83d62
commit da6d2a9
Showing 1 changed file with 8 additions and 4 deletions.
diff --git a/auth/libraries/pip-auth/authlib/hashing_handler.py b/auth/libraries/pip-auth/authlib/hashing_handler.py
@@ -3,14 +3,18 @@
 import argon2
 
 
-HASH_WITH_SALT_LENGTH = 152
-
-
 class HashingHandler:
     def hash(self, to_hash: str, hash_reference: Optional[str] = None) -> str:
         ph = argon2.PasswordHasher()
         return ph.hash(to_hash)
 
     def verify(self, hash: str, password: str) -> bool:
         ph = argon2.PasswordHasher()
-        return ph.verify(hash, password)
+        try:
+            return ph.verify(hash, password)
+        except (
+            argon2.exceptions.VerifyMismatchError,
+            argon2.exceptions.VerificationError,
+            argon2.exceptions.InvalidHashError,
+        ):
+            return False