Nirodan
98bb34f094
- Fix AttributeError crash on empty request body in md5, hasher, textdiff,
jwtdecoder, timestamp, passwordgen (get_json without silent=True / or {})
- Fix memory exhaustion in ipcalc: replace list(network.hosts()) with direct
arithmetic — safe for /8 and larger networks
- Fix O(1M) loop in cronexplainer.get_next_runs: rewrite to skip by
month/day/hour instead of iterating every minute
- Fix connection leak in notes.ensure_table: add try/finally around conn.close
- Fix admin._ensure_tables / notes._ensure_table running DDL on every request:
guard with module-level flags (_tables_initialized, _table_ready)
- Fix update_website returning 200 when no row matched; delete_website returning
success when nothing was deleted; add rowcount checks for both
- Add role validation in admin create_user / update_user (_VALID_ROLES guard)
- Add delimiter length guard in csvviewer (csv.reader requires single char)
- Fix loremipsum: wrap int(count) in try/except ValueError → 400 response
- Fix auth/token: use auth_header[7:] instead of fragile .replace()
- Fix app.py: remove duplicate import sys; cache DB liveness check with 30s TTL
to avoid a new TCP connection on every frontend page load; move api/setup
path guard before DB check
- Replace FileHandler with RotatingFileHandler (5 MB / 3 backups) in logger;
fix relative log paths to absolute paths anchored to __file__
- Wrap all DB connections in try/finally conn.close() throughout admin and notes
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
42 lines
1.5 KiB
Python
42 lines
1.5 KiB
Python
from flask import Blueprint, request, jsonify
|
|
import secrets
|
|
import string
|
|
from util.logger import logger
|
|
from auth.token import verify_token
|
|
|
|
passwordgen_blueprint = Blueprint('passwordgen_tool', __name__)
|
|
|
|
|
|
@passwordgen_blueprint.route('/api/password/generate', methods=['POST'])
|
|
def generate_password():
|
|
user = verify_token()
|
|
if not user:
|
|
return jsonify({"message": "Nicht autorisiert"}), 401
|
|
try:
|
|
data = request.get_json(silent=True) or {}
|
|
length = min(max(int(data.get("length", 16)), 8), 64)
|
|
use_uppercase = data.get("uppercase", True)
|
|
use_lowercase = data.get("lowercase", True)
|
|
use_numbers = data.get("numbers", True)
|
|
use_symbols = data.get("symbols", False)
|
|
|
|
charset = ""
|
|
if use_uppercase:
|
|
charset += string.ascii_uppercase
|
|
if use_lowercase:
|
|
charset += string.ascii_lowercase
|
|
if use_numbers:
|
|
charset += string.digits
|
|
if use_symbols:
|
|
charset += string.punctuation
|
|
|
|
if not charset:
|
|
return jsonify({"message": "Mindestens ein Zeichensatz muss ausgewählt sein"}), 400
|
|
|
|
password = ''.join(secrets.choice(charset) for _ in range(length))
|
|
logger.info(f"Passwort generiert von {user['username']}")
|
|
return jsonify({"password": password})
|
|
except Exception as e:
|
|
logger.error(f"Fehler Passwortgenerator: {e}")
|
|
return jsonify({"message": "Fehler beim Generieren"}), 500
|