Implemented authentication & authorization using Flask-Login and Werkzeug - Githubissues

makehackvoid / mhvdb2

Replacement for MHVDB. Needs a better name.

MIT License

4 stars 7 forks source link

Implemented authentication & authorization using Flask-Login and Werkzeug #68

Closed cmrn closed 10 years ago

cmrn commented 10 years ago

(closes #61)

Functionality:

Admins must be logged in to access admin areas
Only logged in admins can create new admin accounts
If no admin accounts exist, an anonymous user can create the first admin account
Authentication is provided through an email address and password
Passwords are hashed and salted by Werkzeug using PDBKF2 and SHA1 with 1000 iterations (more info)

To be implemented (not in this PR):

Ability to reset an admin's password
Delete/disable admins
View a list of admins

brendam commented 10 years ago

Tested locally, looks good, thanks @cmrn!