don't store the password hash in motion.conf

diff --git a/motioneye/config.py b/motioneye/config.py
index 2a6fbafa4b980703584490a56a0bd76b599e2e1e..8b37139bbc7eccaf824a9c9b340bdbb62838a012 100644 (file)
--- a/motioneye/config.py
+++ b/motioneye/config.py
@@ -19,7 +19,6 @@ import collections
 import datetime
 import errno
 import glob
-import hashlib
 import logging
 import math
 import os.path
@@ -183,9 +182,6 @@ def get_main(as_lines=False):
     _get_additional_config(main_config)
     _set_default_motion(main_config, old_config_format=motionctl.has_old_config_format())
 
-    main_config.setdefault('@admin_password_hash', hashlib.sha1(main_config['@admin_password']).hexdigest())
-    main_config.setdefault('@normal_password_hash', hashlib.sha1(main_config['@normal_password']).hexdigest())
-
     _main_config_cache = main_config
     
     return main_config

diff --git a/motioneye/handlers.py b/motioneye/handlers.py
index 83c6cabd4208e8dbc1c5ebcb615ccb58d8026571..1d30196a16b07a68bcdbbe661e0b8ed7fd0b7d7a 100644 (file)
--- a/motioneye/handlers.py
+++ b/motioneye/handlers.py
@@ -16,6 +16,7 @@
 # along with this program.  If not, see <http://www.gnu.org/licenses/>. 
 
 import datetime
+import hashlib
 import json
 import logging
 import os
@@ -113,9 +114,10 @@ class BaseHandler(RequestHandler):
         login = self.get_argument('_login', None) == 'true'
         if (username == main_config.get('@admin_username') and
             (signature == utils.compute_signature(self.request.method, self.request.uri, # backwards compatibility
-                                                  self.request.body, main_config.get('@admin_password')) or
+                                                  self.request.body, main_config['@admin_password']) or
              signature == utils.compute_signature(self.request.method, self.request.uri,
-                                                  self.request.body, main_config.get('@admin_password_hash')))):
+                                                  self.request.body,
+                                                  hashlib.sha1(main_config['@admin_password']).hexdigest()))):
 
             return 'admin'
         
@@ -126,7 +128,8 @@ class BaseHandler(RequestHandler):
             (signature == utils.compute_signature(self.request.method, self.request.uri, # backwards compatibility
                                                   self.request.body, main_config.get('@normal_password')) or
              signature == utils.compute_signature(self.request.method, self.request.uri,
-                                                  self.request.body, main_config.get('@normal_password_hash')))):
+                                                  self.request.body,
+                                                  hashlib.sha1(main_config['@normal_password']).hexdigest()))):
 
             return 'normal'