gws.lib.password

package documentation

(source)

Password tools.

From __init__.py:

Function	`check`	Check if a password matches a hash.
Function	`compare`	Compares two Strings in a safe way to prevent timing attacks.
Function	`encode`	Encode a password into a hash.
Function	`_pbkdf2`	Undocumented
Function	`_random_string`	Undocumented

def compare(a: str, b: str) -> bool: (source) ¶

Compares two Strings in a safe way to prevent timing attacks.

Parameters
a:`str`	1st String.
b:`str`	2nd String.
Returns
`bool`	`True` if a equals b, `False` otherwise.

def encode(password: str, algo: str = 'sha512') -> str: (source) ¶

Encode a password into a hash.

Parameters
password:`str`	String password.
algo:`str`	Hashing algorithm. Default is SHA512.
Returns
`str`	Respective hash value in the format `$algorithm$salt$hash`.

def check(password: str, encoded: str) -> bool: (source) ¶

Check if a password matches a hash.

Parameters
password:`str`	Password as a string.
encoded:`str`	Hash of the input password as a string.
Returns
`bool`	`True` if password matches the hash, else `False`.

def _pbkdf2(password, salt, algo): (source) ¶

Undocumented

Undocumented