From 83eb8f07f2922b8f4fa320a0dab8f88b22531e99 Mon Sep 17 00:00:00 2001 From: Jonas Braathen Date: Tue, 3 Nov 2026 03:52:41 +0100 Subject: [PATCH] fix: hash user passwords on update --- dpdapi/serializers.py | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/dpdapi/serializers.py b/dpdapi/serializers.py index 58f8e4d..ca1fc0d 100644 --- a/dpdapi/serializers.py +++ b/dpdapi/serializers.py @@ -37,7 +37,7 @@ class UserSerializer(serializers.ModelSerializer): extra_kwargs = {'password': {'write_only': True}} def _hash_password(self, raw_password): - return sha512_crypt.encrypt(raw_password) + return sha512_crypt.hash(raw_password) def create(self, validated_data): user = User( @@ -47,3 +47,8 @@ class UserSerializer(serializers.ModelSerializer): ) user.save() return user + + def update(self, instance, validated_data): + if 'password' in validated_data: + validated_data['password'] = self._hash_password(validated_data['password']) + return super().update(instance, validated_data)