Elgato_dark/bunkerweb
1
0
Fork 0
mirror of https://github.com/bunkerity/bunkerweb synced 2026-05-24 09:28:37 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix: simplify Flask secret handling by removing length validation and using a constant length for generated secrets

Browse source
This commit is contained in:
Théophile Diot 2024-11-26 10:54:25 +01:00
parent 3fe723cda2
commit 38c3a6751f
No known key found for this signature in database
GPG key ID: FA995104A0BA376A
1 changed files with 3 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
src/ui/gunicorn.conf.py
View file

@ -89,7 +89,6 @@ def on_starting(server):
LOGGER.info(f"Permissions set to 600 for {file_path}")
# * Handle Flask secret
VALID_FLASK_SECRET_LENGTH = 64
try:
flask_secret = None
@ -107,16 +106,13 @@ def on_starting(server):
if not flask_secret:
flask_secret_env = getenv("FLASK_SECRET", "").strip()
if flask_secret_env:
if len(flask_secret_env) != VALID_FLASK_SECRET_LENGTH:
LOGGER.warning("Invalid Flask secret length. Ignoring environment variable.")
else:
flask_secret = flask_secret_env
LOGGER.info("Flask secret successfully loaded from the environment variable.")
flask_secret = flask_secret_env
LOGGER.info("Flask secret successfully loaded from the environment variable.")
# * Step 3: Generate new secret if none found
if not flask_secret:
LOGGER.warning("No valid Flask secret found. Generating a new random secret...")
flask_secret = token_hex(VALID_FLASK_SECRET_LENGTH)
flask_secret = token_hex(64)
LOGGER.info("Generated a new Flask secret.")
# * Step 4: Hash for change detection