Skip to content
Commits on Source (7)
......@@ -4,3 +4,4 @@ key.pem
void.py
*.pyc
*.ignore
venv/*
......@@ -20,7 +20,6 @@ def my_render_template( *args, **kwargs ):
kwargs[ "js" ] = config.cdnjs
kwargs[ "css" ] = config.cdncss
kwargs[ "session_timeout" ] = config.session_timeout
kwargs[ "session_security_key" ] = session.get( "session_security_key" )
kwargs[ "account_type" ] = session.get( "account_type", None )
kwargs[ "account_type_name" ] = session.get( "account_type_name", None )
kwargs[ "admin" ] = session.get( "account_type_name", None ) == "Administrator"
......
......@@ -32,6 +32,7 @@
padding-left: 10px;
padding-right: 20px;
width: fit-content;
width: -moz-fit-content;
background-color: rgb( 238, 238, 238 );
}
</style>
......
......@@ -65,7 +65,6 @@ def session_clear_and_prepare():
session[ "process" ] = "login"
session[ "need_to_check" ] = [ "password" ]
session[ "logged" ] = False
session[ "session_security_key" ] = str( uuid4() )
@login_view.route( "/login" )
def login():
......
......@@ -19,13 +19,14 @@
</style>
<script type="text/javascript">
baseurl = "{{ baseurl }}";
homeurl = "{{ url_for( 'base.home' ) }}";
begin_activate_url = "{{ url_for( 'login.webauthn_begin_activate' ) }}";
verify_url = "{{ url_for( 'login.webauthn_verify' ) }}";
begin_assertion_url = "{{ url_for( 'login.webauthn_begin_assertion' ) }}";
verify_assertion_url = "{{ url_for( 'login.webauthn_verify_assertion' ) }}";
localStorage.setItem( "session_key", "" );
</script>
</head>
<body>
......@@ -98,9 +99,7 @@
password_local = await generateKey( password_local, "icnml_" + username + "_localpassword", 50000 );
password_local = password_local.substring( 0, 128 );
var e = encrypt( password_local, "{{ session_security_key }}" );
sessionStorage.setItem( "session_key", e );
localStorage.setItem( "session_key", password_local );
$.ajax( {
url: "{{ url_for( 'login.do_login' ) }}",
......
......@@ -13,7 +13,7 @@
<script type="text/javascript">
baseurl = "{{ baseurl }}";
var password_local = decrypt( sessionStorage.getItem( "session_key" ), "{{ session_security_key }}" );
var password_local = localStorage.getItem( "session_key" );
var filename = decrypt( "{{ filename }}", password_local );
var nickname = decrypt( "{{ nickname }}", password_local );
</script>
......
......@@ -24,7 +24,7 @@
<script type="text/javascript">
baseurl = "{{ baseurl }}";
var password_local = decrypt( sessionStorage.getItem( "session_key" ), "{{ session_security_key }}" );
var password_local = localStorage.getItem( "session_key" );
var nickname = decrypt( "{{ nickname }}", password_local );
var filename = decrypt( "{{ file[ 'filename' ] }}", password_local );
......
......@@ -15,7 +15,7 @@
baseurl = "{{ baseurl }}";
{% if not admin %}
var password_local = decrypt( sessionStorage.getItem( "session_key" ), "{{ session_security_key }}" );
var password_local = localStorage.getItem( "session_key" );
var nickname = decrypt( "{{ nickname }}", password_local );
{% endif %}
......
......@@ -27,7 +27,7 @@
file_id = "{{ file[ 'uuid' ] }}";
{% if not admin %}
var password_local = decrypt( sessionStorage.getItem( "session_key" ), "{{ session_security_key }}" );
var password_local = localStorage.getItem( "session_key" );
var nickname = decrypt( "{{ nickname }}", password_local );
var filename = decrypt( "{{ file[ 'filename' ] }}", password_local );
{% endif %}
......
......@@ -16,7 +16,7 @@
baseurl = "{{ baseurl }}";
submission_id = "{{ submission_id }}";
var password_local = decrypt( sessionStorage.getItem( "session_key" ), "{{ session_security_key }}" );
var password_local = localStorage.getItem( "session_key" );
var nickname = decrypt( "{{ nickname }}", password_local );
var update_nickname = function()
......
......@@ -16,7 +16,7 @@
baseurl = "{{ baseurl }}";
submission_id = "{{ submission_id }}";
var password_local = decrypt( sessionStorage.getItem( "session_key" ), "{{ session_security_key }}" );
var password_local = localStorage.getItem( "session_key" );
var nickname = decrypt( "{{ user.nickname }}", password_local );
var update_nickname = function()
......
......@@ -26,7 +26,7 @@
baseurl = "{{ baseurl }}";
submission_id = "{{ submission_id }}";
var password_local = decrypt( sessionStorage.getItem( "session_key" ), "{{ session_security_key }}" );
var password_local = localStorage.getItem( "session_key" );
var nickname = decrypt( "{{ nickname }}", password_local );
var update_nickname = function()
......
......@@ -14,7 +14,7 @@
<script type="text/javascript">
baseurl = "{{ baseurl }}";
var password_local = decrypt( sessionStorage.getItem( "session_key" ), "{{ session_security_key }}" );
var password_local = localStorage.getItem( "session_key" );
var donors = {};
{% for donor in donors %}
......
......@@ -48,7 +48,7 @@
baseurl = "{{ baseurl }}";
current_pfsp = "{{ current_pfsp }}";
var password_local = decrypt( sessionStorage.getItem( "session_key" ), "{{ session_security_key }}" );
var password_local = localStorage.getItem( "session_key" );
var nickname = decrypt( "{{ nickname }}", password_local );
var filename = decrypt( "{{ file[ 'filename' ] }}", password_local );
var note = decrypt( "{{ file[ 'note' ] }}", password_local );
......
......@@ -16,7 +16,7 @@
baseurl = "{{ baseurl }}";
submission_id = "{{ submission_id }}";
var password_local = decrypt( sessionStorage.getItem( "session_key" ), "{{ session_security_key }}" );
var password_local = localStorage.getItem( "session_key" );
</script>
</head>
<body class="icnml_main_layout">
......
......@@ -14,7 +14,7 @@
<script type="text/javascript">
baseurl = "{{ baseurl }}";
var password_local = decrypt( sessionStorage.getItem( "session_key" ), "{{ session_security_key }}" );
var password_local = localStorage.getItem( "session_key" );
var nickname = decrypt( "{{ nickname }}", password_local );
var tp_filename = decrypt( "{{ tp_filename }}", password_local );
......
......@@ -13,7 +13,7 @@
<script type="text/javascript">
baseurl = "{{ baseurl }}";
var password_local = decrypt( sessionStorage.getItem( "session_key" ), "{{ session_security_key }}" );
var password_local = localStorage.getItem( "session_key" );
var filename = decrypt( "{{ filename }}", password_local );
var nickname = decrypt( "{{ nickname }}", password_local );
</script>
......
......@@ -15,7 +15,7 @@
baseurl = "{{ baseurl }}";
submission_id = "{{ submission_id }}";
var password_local = decrypt( sessionStorage.getItem( "session_key" ), "{{ session_security_key }}" );
var password_local = localStorage.getItem( "session_key" );
var nickname = decrypt( "{{ user.nickname }}", password_local );
var update_nickname = function()
......
......@@ -14,7 +14,7 @@
<script type="text/javascript">
baseurl = "{{ baseurl }}";
var password_local = decrypt( sessionStorage.getItem( "session_key" ), "{{ session_security_key }}" );
var password_local = localStorage.getItem( "session_key" );
var nickname = decrypt( "{{ nickname }}", password_local );
</script>
</head>
......
......@@ -13,7 +13,7 @@
<script type="text/javascript">
baseurl = "{{ baseurl }}";
var password_local = decrypt( sessionStorage.getItem( "session_key" ), "{{ session_security_key }}" );
var password_local = localStorage.getItem( "session_key" );
var nickname = decrypt( "{{ nickname }}", password_local );
</script>
......