Re: [web2py] Re: basic auth with custom get_or_create_user call

2011-11-22 Thread Matt Broadstone
On Tue, Nov 22, 2011 at 4:11 PM, Anthony wrote: > I haven't been following the discussion. Do you want to remove the CRYPT > validator? If so, I think something like: > db.auth_user.password.requires = None > This seems to have fixed the issue, thank you both Matt > Anthony > > On Tuesday, Novem

Re: [web2py] Re: basic auth with custom get_or_create_user call

2011-11-22 Thread Anthony
I haven't been following the discussion. Do you want to remove the CRYPT validator? If so, I think something like: db.auth_user.password.requires = None Anthony On Tuesday, November 22, 2011 3:57:18 PM UTC-5, Matt wrote: > > On Tue, Nov 22, 2011 at 3:50 PM, Anthony wrote: > > On Tuesday, Novem

Re: [web2py] Re: basic auth with custom get_or_create_user call

2011-11-22 Thread Matt Broadstone
On Tue, Nov 22, 2011 at 3:50 PM, Anthony wrote: > On Tuesday, November 22, 2011 3:00:46 PM UTC-5, Matt wrote: >> >> Aren't passwords always hashed when entered in the database? > > Not necessarily. You have to have the CRYPT() validator on the password > field for hashing. It is there by default,

Re: [web2py] Re: basic auth with custom get_or_create_user call

2011-11-22 Thread Anthony
On Tuesday, November 22, 2011 3:00:46 PM UTC-5, Matt wrote: > > > Aren't passwords always hashed when entered in the database? Not necessarily. You have to have the CRYPT() validator on the password field for hashing. It is there by default, but is not required and could be removed. Anthony

Re: [web2py] Re: basic auth with custom get_or_create_user call

2011-11-22 Thread Matt Broadstone
On Tue, Nov 22, 2011 at 2:31 PM, Matt Broadstone wrote: > On Tue, Nov 22, 2011 at 1:32 PM, Massimo Di Pierro > wrote: >> If the password is a UUID how are the users supposed to know what it >> and use it to login. I am missing something here. > its a temporary password, for a one time callback. >

Re: [web2py] Re: basic auth with custom get_or_create_user call

2011-11-22 Thread Matt Broadstone
On Tue, Nov 22, 2011 at 1:32 PM, Massimo Di Pierro wrote: > If the password is a UUID how are the users supposed to know what it > and use it to login. I am missing something here. its a temporary password, for a one time callback. > On Nov 22, 12:08 pm, Matt Broadstone wrote: >> On Tue, Nov 22,

[web2py] Re: basic auth with custom get_or_create_user call

2011-11-22 Thread Massimo Di Pierro
If the password is a UUID how are the users supposed to know what it and use it to login. I am missing something here. On Nov 22, 12:08 pm, Matt Broadstone wrote: > On Tue, Nov 22, 2011 at 9:21 AM, Massimo Di > Pierro wrote: > > must be hashed > > Hmm I can't seem to get this working. I should p

Re: [web2py] Re: basic auth with custom get_or_create_user call

2011-11-22 Thread Matt Broadstone
On Tue, Nov 22, 2011 at 9:21 AM, Massimo Di Pierro wrote: > must be hashed Hmm I can't seem to get this working. I should probably have mentioned that we are using basic auth to use this user on the client side. When I hash the password and insert it into the database it is not hashing the passwor

[web2py] Re: basic auth with custom get_or_create_user call

2011-11-22 Thread Massimo Di Pierro
must be hashed settings["serverPassword"] = db.auth_user.password.validate(str(uuid.uuid4()))[0] On Nov 22, 8:19 am, Matt Broadstone wrote: > Hello, > In our project we need to create a temporary user for the web2py app > so that a remote system can send back a singe status update. In order > to