diff --git a/auth/libraries/pip-auth/authlib/hashing_handler.py b/auth/libraries/pip-auth/authlib/hashing_handler.py index f64c2667..586a5c4c 100644 --- a/auth/libraries/pip-auth/authlib/hashing_handler.py +++ b/auth/libraries/pip-auth/authlib/hashing_handler.py @@ -3,9 +3,6 @@ import argon2 -HASH_WITH_SALT_LENGTH = 152 - - class HashingHandler: def hash(self, to_hash: str, hash_reference: Optional[str] = None) -> str: ph = argon2.PasswordHasher() @@ -13,4 +10,11 @@ def hash(self, to_hash: str, hash_reference: Optional[str] = None) -> str: def verify(self, hash: str, password: str) -> bool: ph = argon2.PasswordHasher() - return ph.verify(hash, password) + try: + return ph.verify(hash, password) + except ( + argon2.exceptions.VerifyMismatchError, + argon2.exceptions.VerificationError, + argon2.exceptions.InvalidHashError, + ): + return False