Correctly handle NULL password hashes from the database

9 years ago · 1400bb1663
parent ae1af262f6
commit 1400bb1663
1 changed files with 4 additions and 1 deletions
--- a/synapse/handlers/auth.py
+++ b/synapse/handlers/auth.py
@ -615,4 +615,7 @@ class AuthHandler(BaseHandler):
        Returns:
            Whether self.hash(password) == stored_hash (bool).
        """
+        if stored_hash:
            return bcrypt.hashpw(password, stored_hash) == stored_hash
+        else:
+            return False