Skip to content

Commit 8badbd2

Browse files
committed
fix wampcra auth with salt
1 parent f722a22 commit 8badbd2

File tree

1 file changed

+3
-1
lines changed

1 file changed

+3
-1
lines changed

crossbar/router/auth/wampcra.py

+3-1
Original file line numberDiff line numberDiff line change
@@ -62,7 +62,6 @@ def _compute_challenge(self, user):
6262
}
6363
challenge: str = json.dumps(challenge_obj, ensure_ascii=False)
6464
secret = user['secret'].encode('utf8')
65-
signature = auth.compute_wcs(secret, challenge.encode('utf8')).decode('ascii')
6665

6766
# extra data to send to client in CHALLENGE
6867
extra = {'challenge': challenge}
@@ -73,6 +72,9 @@ def _compute_challenge(self, user):
7372
extra['salt'] = user['salt']
7473
extra['iterations'] = user.get('iterations', 1000)
7574
extra['keylen'] = user.get('keylen', 32)
75+
secret = auth.derive_key(secret, extra['salt'], extra['iterations'], extra['keylen'])
76+
77+
signature = auth.compute_wcs(secret, challenge.encode('utf8')).decode('ascii')
7678

7779
return extra, signature
7880

0 commit comments

Comments
 (0)