38 lines
1.3 KiB
Python
38 lines
1.3 KiB
Python
"""Quick smoke test: can the passwords in .env be verified? (No app imports.)"""
|
|
import base64, hashlib, hmac, os
|
|
from pathlib import Path
|
|
from dotenv import load_dotenv
|
|
|
|
load_dotenv(Path(__file__).parent / ".env", override=True)
|
|
|
|
def verify_password(password, encoded):
|
|
try:
|
|
prefix, raw_iters, raw_salt, raw_digest = encoded.split("$")
|
|
if prefix != "pbkdf2_sha256":
|
|
return False
|
|
salt = base64.b64decode(raw_salt)
|
|
expected = base64.b64decode(raw_digest)
|
|
iterations = int(raw_iters)
|
|
except (ValueError, TypeError):
|
|
return False
|
|
candidate = hashlib.pbkdf2_hmac("sha256", password.encode("utf-8"), salt, iterations)
|
|
return hmac.compare_digest(candidate, expected)
|
|
|
|
admin_hash = os.environ["AUTH_ADMIN_PASSWORD_HASH"]
|
|
user_hash = os.environ["AUTH_USER_PASSWORD_HASH"]
|
|
|
|
print(f"Admin hash prefix: {admin_hash[:20]!r}")
|
|
print(f"User hash prefix: {user_hash[:20]!r}")
|
|
|
|
ok1 = verify_password("DevAdmin!2026", admin_hash)
|
|
ok2 = verify_password("DevUser!2026", user_hash)
|
|
|
|
print(f"Admin password verify: {ok1}")
|
|
print(f"User password verify: {ok2}")
|
|
|
|
if ok1 and ok2:
|
|
print("\nSUCCESS - both passwords verify. Login will work.")
|
|
else:
|
|
print("\nFAILURE - one or both passwords do NOT verify.")
|
|
exit(1)
|