E-commerce-FastAPI
E-commerce-FastAPI copied to clipboard
Authentication not validating password at all.
https://github.com/onionj/E-commerce-FastAPI/blob/a37d591ef2e25310a364403513aac9a1b5582ab1/authentication.py#L66
authentication.py:70: RuntimeWarning: coroutine 'verify_password' was never awaited
if user and verify_password(password, user.password):
RuntimeWarning: Enable tracemalloc to get the object allocation traceback
INFO: 127.0.0.1:46472 - "POST /token HTTP/1.1" 200 OK
verify_password is an async function and should be awaited, not awaiting it will result in returning a coroutine object that render the condition pointless as it will give valid token for any true username provided.
Oh, thank you, can you fix it and make a pull request?