jeans/supervisor
jeans/supervisor
1
0
Fork 0
mirror of https://github.com/home-assistant/supervisor.git synced 2025-07-12 19:56:29 +00:00
Code Issues Packages Projects Releases Wiki Activity

Don't clean cache on fake auth (#765)

Browse Source 
* Don't clean cache on fake auth

* Update auth.py
This commit is contained in:
Pascal Vizeli 2018-10-16 12:30:24 +02:00 committed by GitHub
parent cee2c5469f
commit 84f791220e
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
hassio/auth.py
View File

@ -43,9 +43,13 @@ class Auth(JsonConfig, CoreSysAttributes):
self._data[username_h] = password_h
self.save_data()
def _dismatch_cache(self, username):
def _dismatch_cache(self, username, password):
"""Remove user from cache."""
username_h = _rehash(username)
password_h = _rehash(password, username)
if self._data.get(username_h) =! password_h:
return
self._data.pop(username_h, None)
self.save_data()
@ -76,7 +80,7 @@ class Auth(JsonConfig, CoreSysAttributes):
return True
_LOGGER.warning("Wrong login from %s", username)
self._dismatch_cache(username)
self._dismatch_cache(username, password)
return False
except HomeAssistantAPIError:
_LOGGER.error("Can't request auth on Home Assistant!")