beenull/power-mailinabox
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Safeguard against empty mru_token column

Browse source 
* hmac.compare_digest() expects arguments of type string, make sure we don't pass None
 * Currently, this cannot happen but we might not want to store `mru_token` during setup
This commit is contained in:
Felix Spöttel 2020-09-06 13:03:54 +02:00
parent 49c333221a
commit 4791c2fc62
1 changed files with 4 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
management/mailconfig.py
View file

@ -557,10 +557,12 @@ def get_mfa_state(email, env):
if credential_row is None:
return { 'type': None }
secret, mru_token = credential_row
return {
'type': 'totp',
'secret': credential_row[0],
'mru_token': credential_row[1]
'secret': secret,
'mru_token': '' if mru_token is None else mru_token
}
def create_totp_credential(email, secret, token, env):