Merge pull request #380 from TeskaLabs/patch/v24.17-login-stacktrace

Handle Argon2 VerifyMismatchError
TeskaLabs · May 17, 2024 · 59084a4 · 59084a4
2 parents a2e0338 + 5d96785
commit 59084a4
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/seacatauth/generic.py b/seacatauth/generic.py
@@ -299,7 +299,10 @@ def argon2_hash(secret: bytes | str) -> str:
 
 
 def argon2_verify(hash: bytes | str, secret: bytes | str) -> bool:
-	return argon2.PasswordHasher().verify(hash, secret)
+	try:
+		return argon2.PasswordHasher().verify(hash, secret)
+	except argon2.exceptions.VerifyMismatchError:
+		return False
 
 
 def generate_ergonomic_token(length: int):