|
@@ -18,6 +18,7 @@ class Settings(BaseSettings):
|
|
|
app_name: str = "Numeretti"
|
|
|
storage_dir: Path = Path("/var/lib/pizzicore")
|
|
|
queues_number: int = 1
|
|
|
+ admin_password: str = "changeme!"
|
|
|
|
|
|
class Config:
|
|
|
env_file = "pizzicore.env"
|
|
@@ -125,9 +126,8 @@ class Value(BaseModel):
|
|
|
|
|
|
|
|
|
def get_current_role(credentials: HTTPBasicCredentials = Depends(security)):
|
|
|
- # XXX: read user/pass from config
|
|
|
- correct_username = secrets.compare_digest(credentials.username, "avanti")
|
|
|
- correct_password = secrets.compare_digest(credentials.password, "prossimo")
|
|
|
+ correct_username = secrets.compare_digest(credentials.username, "admin")
|
|
|
+ correct_password = secrets.compare_digest(credentials.password, settings.admin_password)
|
|
|
if not (correct_username and correct_password):
|
|
|
raise HTTPException(
|
|
|
status_code=status.HTTP_401_UNAUTHORIZED,
|