Update auth.py

NebraLtd · Oct 20, 2024 · db26d28 · db26d28
1 parent 7466ec4
commit db26d28
Showing 1 changed file with 10 additions and 2 deletions.
diff --git a/hw_diag/views/auth.py b/hw_diag/views/auth.py
@@ -70,9 +70,17 @@ def get_password_change_form():
 @authenticate
 def handle_password_change():
     current_password = request.form.get('txtOriginalPassword')
-    new_password = request.form.get('txtNewPassword')
-    confirm_password = request.form.get('txtConfirmPassword')
+    PASSWORD_OVERRIDE = os.getenv('PASSWORD_OVERRIDE', 'false')
 
+    if PASSWORD_OVERRIDE != "false":  # nosec
+        new_password = PASSWORD_OVERRIDE
+        confirm_password = new_password
+        logging.info("Password overriden env var - not updating!")
+    else:
+        new_password = request.form.get('txtNewPassword')
+        confirm_password = request.form.get('txtConfirmPassword')
+        logging.info("No password override. Saving new password!")
+
     result = update_password(
         current_password,
         new_password,