|
1 | 1 | from flask import jsonify, make_response, request |
2 | 2 | from flask_security import roles_required |
3 | | -from flask_security.utils import verify_password |
4 | 3 | from marshmallow import fields, post_load, Schema |
5 | 4 |
|
6 | 5 | from arcsi.api import arcsi |
@@ -63,12 +62,12 @@ def get_api_token(): |
63 | 62 | return make_response( |
64 | 63 | jsonify("Only accepts multipart/form-data for now, sorry"), 503, headers |
65 | 64 | ) |
66 | | - show_metadata = request.form.to_dict() |
67 | | - name = show_metadata["name"] |
68 | | - password = show_metadata["password"] |
| 65 | + user_metadata = request.form.to_dict() |
| 66 | + name = user_metadata["name"] |
| 67 | + password = user_metadata["password"] |
69 | 68 | user_query = User.query.filter_by(name=name) |
70 | | - user = user_query.first_or_404() |
71 | | - if user and verify_password(password, user.password): |
| 69 | + user = user_query.first() |
| 70 | + if user and user.verify_and_update_password(password): |
72 | 71 | token = user.get_auth_token() |
73 | 72 | ret = {"api_token": token} |
74 | 73 | return make_response(jsonify(ret), 200, headers) |
|
0 commit comments