lynnesbian/curious-greg
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

much nicer method of ensuring that the user owns the CC account

Browse source
This commit is contained in:
Lynne Megido 2018-11-12 20:58:41 +10:00
parent df9391f5bd
commit 7e8868eb5c
Signed by: lynnesbian
GPG key ID: FB7B970303ACE499
2 changed files with 4 additions and 14 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
static/style.css
View file

@ -22,6 +22,7 @@ h2 {
bottom:2.5%; bottom:2.5%;
width:95%; width:95%;
font-size:0.8em; font-size:0.8em;
left: 2.5%;
} }
#footer, #footer a { #footer, #footer a {
color: #aaa; color: #aaa;
@ -30,7 +31,7 @@ h2 {
height:300px; height:300px;
width:300px; width:300px;
} }
form, .profilecard, #question, #codebox { form, .profilecard, #question {
background-color: #444b5d; background-color: #444b5d;
display:inline-block; display:inline-block;
padding:50px; padding:50px;
@ -97,13 +98,3 @@ button.fullwidth, .button.fullwidth {
font-size: 1.2em; font-size: 1.2em;
line-height:2.6em; line-height:2.6em;
} }
.code {
background-color: white;
color: black;
font-size: 3em;
font-family: monospace;
display: inline-block;
padding: 15px;
border-radius: 10px;
margin: 15px;
}

5
web.py
View file

@ -204,13 +204,12 @@ def cc_connect_confirm():
@app.route('/internal/ccc_b') @app.route('/internal/ccc_b')
def ccc_b(): def ccc_b():
session['cctemp']['challenge'] = random.randint(100000, 999999) #provided by CG session['cctemp']['challenge'] = random.randint(100000, 999999)
session['cctemp']['response'] = random.randint(100000, 999999) #user will be asked to answer with this code to prove it's really them
session.modified = True session.modified = True
form_data = { form_data = {
"addressees": session['cctemp']['ccid'], "addressees": session['cctemp']['ccid'],
"anon": "true", "anon": "true",
"question": "Hi! Please respond to this question with the code given to you by Curious Greg. If you did not request this code, you may safely delete this question. Challenge: {}".format(session['cctemp']['challenge']) "question": "Hi {}! Your Curious Greg authentication code is: {}. You may safely delete this question after entering the code. If you didn't request this, you can ignore this question.".format(session['acct'], session['cctemp']['challenge'])
} }
r = requests.post("https://curiouscat.me/api/v2/post/create", data=form_data) r = requests.post("https://curiouscat.me/api/v2/post/create", data=form_data)
j = r.json() j = r.json()