From 91e44a78c1b8ce30dc871259ffca9b1fc0697078 Mon Sep 17 00:00:00 2001 From: Spitap Date: Thu, 25 Aug 2022 19:50:35 +0200 Subject: [PATCH] Removed soft generation for tokens --- mfa/recovery.py | 39 +++++++++++++++++++-------------------- 1 file changed, 19 insertions(+), 20 deletions(-) diff --git a/mfa/recovery.py b/mfa/recovery.py index 07a0b66..902603c 100644 --- a/mfa/recovery.py +++ b/mfa/recovery.py @@ -38,26 +38,25 @@ def randomGen(n): @never_cache -def genTokens(request, softGen=False): - if not softGen or (softGen and token_left(request) == 0): - #Delete old ones - delTokens(request) - number = 5 - #Then generate new one - salt = randomGen(15) - hashedKeys = [] - clearKeys = [] - for i in range(5): - token = randomGen(5) + "-" + randomGen(5) - hashedToken = make_password(token, salt, 'pbkdf2_sha256_custom') - hashedKeys.append(hashedToken) - clearKeys.append(token) - uk=User_Keys() - uk.username = request.user.username - uk.properties={"secret_keys":hashedKeys, "enabled":[True for j in range(5)], "salt":salt} - uk.key_type="RECOVERY" - uk.enabled = False - uk.save() +def genTokens(request): + #Delete old ones + delTokens(request) + number = 5 + #Then generate new one + salt = randomGen(15) + hashedKeys = [] + clearKeys = [] + for i in range(5): + token = randomGen(5) + "-" + randomGen(5) + hashedToken = make_password(token, salt, 'pbkdf2_sha256_custom') + hashedKeys.append(hashedToken) + clearKeys.append(token) + uk=User_Keys() + uk.username = request.user.username + uk.properties={"secret_keys":hashedKeys, "enabled":[True for j in range(5)], "salt":salt} + uk.key_type="RECOVERY" + uk.enabled = False + uk.save() return HttpResponse(simplejson.dumps({"keys":clearKeys}))