Yasuke/moto
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix SALT and SRP_B params

Browse Source
This commit is contained in:
Antonin 2020-12-03 11:05:59 +01:00
parent ac0ffab4d0
commit c5d0aa0c10
2 changed files with 8 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
moto/cognitoidp/models.py
View File

@ -944,8 +944,8 @@ class CognitoIdpBackend(BaseBackend):
"ChallengeName": "PASSWORD_VERIFIER",
"Session": session,
"ChallengeParameters": {
"SALT": str(uuid.uuid4()),
"SRP_B": str(uuid.uuid4()),
"SALT": uuid.uuid4().hex,
"SRP_B": uuid.uuid4().hex,
"USERNAME": user.id,
"USER_ID_FOR_SRP": user.id,
"SECRET_BLOCK": session,

12
tests/test_cognitoidp/test_cognitoidp.py
View File

@ -1294,7 +1294,7 @@ def user_authentication_flow(conn):
AuthFlow="USER_SRP_AUTH",
AuthParameters={
"USERNAME": username,
"SRP_A": str(uuid.uuid4()),
"SRP_A": uuid.uuid4().hex,
"SECRET_HASH": secret_hash,
},
)
@ -1341,7 +1341,7 @@ def user_authentication_flow(conn):
AuthFlow="USER_SRP_AUTH",
AuthParameters={
"USERNAME": username,
"SRP_A": str(uuid.uuid4()),
"SRP_A": uuid.uuid4().hex,
"SECRET_HASH": secret_hash,
},
)
@ -1638,7 +1638,7 @@ def test_initiate_auth_USER_SRP_AUTH():
AuthFlow="USER_SRP_AUTH",
AuthParameters={
"USERNAME": username,
"SRP_A": str(uuid.uuid4()),
"SRP_A": uuid.uuid4().hex,
"SECRET_HASH": secret_hash,
},
)
@ -1688,7 +1688,7 @@ def test_initiate_auth_for_unconfirmed_user():
AuthFlow="USER_SRP_AUTH",
AuthParameters={
"USERNAME": username,
"SRP_A": str(uuid.uuid4()),
"SRP_A": uuid.uuid4().hex,
"SECRET_HASH": secret_hash,
},
)
@ -1724,7 +1724,7 @@ def test_initiate_auth_with_invalid_secret_hash():
AuthFlow="USER_SRP_AUTH",
AuthParameters={
"USERNAME": username,
"SRP_A": str(uuid.uuid4()),
"SRP_A": uuid.uuid4().hex,
"SECRET_HASH": invalid_secret_hash,
},
)
@ -1782,7 +1782,7 @@ def test_respond_to_auth_challenge_with_invalid_secret_hash():
AuthFlow="USER_SRP_AUTH",
AuthParameters={
"USERNAME": result["username"],
"SRP_A": str(uuid.uuid4()),
"SRP_A": uuid.uuid4().hex,
"SECRET_HASH": valid_secret_hash,
},
)