pallets-eco / flask-jwt

JWT (JSON Web Tokens) for Flask applications
MIT License
564 stars 177 forks source link

authentication handler doesn't support empty passwords #96

Open shlomibs opened 8 years ago

shlomibs commented 8 years ago

In _default_auth_request_handler() function, empty passwords are filtered out by the criterion = [username, password, len(data) == 2] list. This can be easily solved by changing the password criteria to password is not None