From 7a7c17999702ade9791c30b8734e565cb9112d34 Mon Sep 17 00:00:00 2001 From: Ethan Dalool Date: Mon, 22 Nov 2021 12:35:45 -0800 Subject: [PATCH] Fix password check when auth_cookie is http.cookies.Morsel. --- SimpleServer/simpleserver.py | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/SimpleServer/simpleserver.py b/SimpleServer/simpleserver.py index ebb765c..90bb219 100644 --- a/SimpleServer/simpleserver.py +++ b/SimpleServer/simpleserver.py @@ -116,7 +116,11 @@ class RequestHandler(http.server.BaseHTTPRequestHandler): if self.auth_header == self.server.password: return True - if self.server.accepted_tokens is not None and self.auth_cookie in self.server.accepted_tokens: + cookie = self.auth_cookie + if isinstance(cookie, http.cookies.Morsel): + cookie = cookie.value + + if self.server.accepted_tokens is not None and cookie in self.server.accepted_tokens: return True if self.server.accepted_ips is not None and self.remote_addr in self.server.accepted_ips: