From 7a082bb2fd2d70a556a82f29530eb9f25a73b352 Mon Sep 17 00:00:00 2001 From: Ruud Date: Sat, 11 Feb 2012 18:31:41 +0100 Subject: [PATCH] Don't allow empty API_KEY --- couchpotato/core/_base/_core/main.py | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/couchpotato/core/_base/_core/main.py b/couchpotato/core/_base/_core/main.py index 1e318fbb..652b2d26 100644 --- a/couchpotato/core/_base/_core/main.py +++ b/couchpotato/core/_base/_core/main.py @@ -6,6 +6,7 @@ from couchpotato.core.logger import CPLog from couchpotato.core.plugins.base import Plugin from couchpotato.environment import Env from flask import request +from uuid import uuid4 import os import thread import time @@ -36,6 +37,7 @@ class Core(Plugin): addEvent('app.api_url', self.createApiUrl) addEvent('setting.save.core.password', self.md5Password) + addEvent('setting.save.core.api_key', self.checkApikey) self.removeRestartFile() @@ -63,6 +65,9 @@ class Core(Plugin): def md5Password(self, value): return md5(value) if value else '' + def checkApikey(self, value): + return value if value and len(value) > 3 else uuid4().hex + def available(self): return jsonified({ 'succes': True