Produits Entr'ouvert » Authentic 2

class PloneSHA1PasswordHasher(hashers.SHA1PasswordHasher):

    # from https://www.fourdigits.nl/blog/converting-plone-data-to-django/

    """

    The SHA1 password hashing algorithm used by Plone.

    Plone uses `password + salt`, Django has `salt + password`.

    """

    algorithm = "plonesha1"

    _prefix = '{SSHA}'

    def encode(self, password, salt):

        """Encode a plain text password into a plonesha1 style hash."""

        assert password is not None

        assert salt

        password = force_bytes(password)

        salt = force_bytes(salt)

        hashed = base64.b64encode(hashlib.sha1(password + salt).digest() + salt)

        return "%s$%s%s" % (self.algorithm, self._prefix, hashed)

    def verify(self, password, encoded):

        """Verify the given password against the encoded string."""

        algorithm, data = encoded.split('$', 1)

        assert algorithm == self.algorithm

        # throw away the prefix

        if data.startswith(self._prefix):

            data = data[len(self._prefix):]

        # extract salt from encoded data

        intermediate = base64.b64decode(data)

        salt = intermediate[20:].strip()

        password_encoded = self.encode(password, salt)

        return constant_time_compare(password_encoded, encoded)

    def safe_summary(self, encoded):

        algorithm, hash = encoded.split('$', 1)

        assert algorithm == self.algorithm

        return OrderedDict([

            (_('algorithm'), algorithm),

            (_('hash'), hashers.mask_hash(hash)),

        ])

        'authentic2.hashers.MD5OLDAPPasswordHasher',

        'authentic2.hashers.PloneSHA1PasswordHasher',

def test_plone_hasher():

    hasher = hashers.PloneSHA1PasswordHasher()

    hashed = hasher.encode('admin', 'salt')

    assert hasher.verify('admin', hashed)

    assert hashed == 'plonesha1${SSHA}m8eqVfCP2tk1w/g2LT9IvPcOsoBzYWx0'