rezidir/geo_front
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

remove MD5 hashing, send plaintext secret key for bcrypt verification

Browse Source
This commit is contained in:
dmit.b
2026-06-25 11:56:08 +03:00
parent 4e7a9d823b
commit 86e9b5a22a
4 changed files with 18 additions and 21 deletions
Download Patch File Download Diff File Expand all files Collapse all files
lib/screens/login_screen.dart
+7 -11
View File
@@ -1,7 +1,5 @@
import 'dart:convert';
import 'package:convert/convert.dart';
import 'package:crypto/crypto.dart';
import 'package:flutter/foundation.dart';
import 'package:flutter/material.dart';
import 'package:geolocator/geolocator.dart';
@@ -46,8 +44,6 @@ class _LoginScreenState extends State<LoginScreen>
super.dispose();
}
static const String _secretKey = 'FtracKer*1405.';
@override
Widget build(BuildContext context) {
final authProvider = context.watch<AuthProvider>();
@@ -178,19 +174,19 @@ class _LoginScreenState extends State<LoginScreen>
// Error is handled by provider
}
} else {
if (_secretKeyController.text != _secretKey) {
authProvider.setError('Invalid secret key');
if (_loginController.text.length <= 4) {
authProvider.setError('Login must be more than 4 characters');
return;
}
if (_passwordController.text.length <= 8) {
authProvider.setError('Password must be more than 8 characters');
return;
}
Digest digest = md5.convert(
utf8.encode(_secretKeyController.text),
);
String secretKeyHash = hex.encode(digest.bytes);
try {
await authProvider.register(
_loginController.text,
_passwordController.text,
secretKeyHash,
_secretKeyController.text,
);
} catch (e) {
// Error is handled by provider