Re: [web2py] Re: Credential (email) encryption

2020-05-22 Thread Kevin Keller
It shouldn't be hard to use hashes for usernames too, but there may be complications later when it comes to storing user sessions and needing user information in your session etc. I think iy would br easier if you just encrypt the whole database and make web2py read the encrypted data transparentl

Re: [web2py] Re: Credential (email) encryption

2020-05-22 Thread Kevin Keller
Without having checked the code, i am pretty sure that the builtin Auth Modul of Web2py expects a plaintext email in the username field when checking the credentials. I suppose now it fails as the encrypted email value does simply not match the plaintext one. You would need to modify the Auth mod

[web2py] Re: Credential (email) encryption

2020-05-22 Thread Michele Serra
Please answer! Il giorno martedì 21 aprile 2020 15:16:38 UTC+2, Michele Serra ha scritto: > > Anyone? please > > Il giorno venerdì 10 aprile 2020 12:38:02 UTC+2, Michele Serra ha scritto: >> >> Hi, >> I use the email as the login credential, I tried to encrypt the email with >> >> db.auth_user.em

[web2py] Re: Credential (email) encryption

2020-04-21 Thread Michele Serra
Anyone? Il giorno venerdì 10 aprile 2020 12:38:02 UTC+2, Michele Serra ha scritto: > > Hi, > I use the email as the login credential, I tried to encrypt the email with > > db.auth_user.email.filter_in = lambda value : secure_dumps(value, enc_key) > db.auth_user.email.filter_out = lambda value : s