blocks|key|1548426|text|我认为您应该制定自己的身份验证方法，因为您可以让它最适合您的应用程序，但是使用一个库进行加密，比如pycrypto或其他一些更轻量级的库。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|1548427|顺便说一句，如果你需要用于pycrypto的windows二进制文件，你可以得到here。|1548428|entityMap|0|LINK|mutability|MUTABLE|url|http://www.pycrypto.org/|1|http://www.voidspace.org.uk/python/modules.shtml#pycrypto^0|1D|8|0|0|14|4|1|0^^$0|@$1|2|3|4|5|6|7|P|8|@]|9|@$A|Q|B|R|1|S]]|C|$]]|$1|D|3|E|5|6|7|T|8|@]|9|@$A|U|B|V|1|W]]|C|$]]|$1|F|3|-4|5|6|7|X|8|@]|9|@]|C|$]]]|G|$H|$5|I|J|K|C|$L|M]]|N|$5|I|J|K|C|$L|O]]]]

I think you should make your own authentication method as you can make it fit your application best but use a library for encryption, such as <a href="http://www.pycrypto.org" rel="nofollow noreferrer">pycrypto</a> or some other more lightweight library.

btw, if you need windows binaries for pycrypto you can get them <a href="http://www.voidspace.org.uk/python/modules.shtml#pycrypto" rel="nofollow noreferrer">here</a>

blocks|key|1548479|text|如果您想要简单，那么使用一个字典，其中键是用户名，值是密码(用SHA256之类的东西加密)。Pickle它到/从磁盘(因为这是一个桌面应用程序，我假设在内存中保持它的开销将可以忽略不计)。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|1548480|例如：|1548481|import+pickle
import+hashlib

#+Load+from+disk
pwd_file+=+"mypasswords"
if+os.path.exists(pwd_file):
++++pwds+=+pickle.load(open(pwd_file,+"rb"))
else:
++++pwds+=+{}

#+Save+to+disk
pickle.dump(pwds,+open(pwd_file,+"wb"))

#+Add+password
pwds[username]+=+hashlib.sha256(password).hexdigest()

#+Check+password
if+pwds[username]+=+hashlib.sha256(password).hexdigest():
+++print+"Good"
else:
+++print+"No+match"|code-block|syntax|javascript|1548482|请注意，这会将密码存储为hash+-因此它们本质上是不可恢复的。如果你丢失了你的密码，你会被分配一个新的，而不是找回旧的。|1548483|entityMap|0|LINK|mutability|MUTABLE|url|http://docs.python.org/lib/module-pickle.html|1|http://docs.python.org/lib/module-hashlib.html^0|1A|6|0|0|0|0|C|4|1|0^^$0|@$1|2|3|4|5|6|7|W|8|@]|9|@$A|X|B|Y|1|Z]]|C|$]]|$1|D|3|E|5|6|7|10|8|@]|9|@]|C|$]]|$1|F|3|G|5|H|7|11|8|@]|9|@]|C|$I|J]]|$1|K|3|L|5|6|7|12|8|@]|9|@$A|13|B|14|1|15]]|C|$]]|$1|M|3|-4|5|6|7|16|8|@]|9|@]|C|$]]]|N|$O|$5|P|Q|R|C|$S|T]]|U|$5|P|Q|R|C|$S|V]]]]

If you want simple, then use a dictionary where the keys are the usernames and the values are the passwords (encrypted with something like SHA256). <a href="http://docs.python.org/lib/module-pickle.html" rel="nofollow noreferrer">Pickle</a> it to/from disk (as this is a desktop application, I'm assuming the overhead of keeping it in memory will be negligible).

For example:

<pre><code>import pickle
import hashlib

# Load from disk
pwd_file = "mypasswords"
if os.path.exists(pwd_file):
 pwds = pickle.load(open(pwd_file, "rb"))
else:
 pwds = {}

# Save to disk
pickle.dump(pwds, open(pwd_file, "wb"))

# Add password
pwds[username] = hashlib.sha256(password).hexdigest()

# Check password
if pwds[username] = hashlib.sha256(password).hexdigest():
 print "Good"
else:
 print "No match"
</code></pre>

Note that this stores the passwords as a <a href="http://docs.python.org/lib/module-hashlib.html" rel="nofollow noreferrer">hash</a> - so they are essentially unrecoverable. If you lose your password, you'd get allocated a new one, not get the old one back.

blocks|key|1548540|text|将以下代码视为伪代码。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1548541|try:
++++from+hashlib+import+sha+as+hasher
except+ImportError:
++++#+You+could+probably+exclude+the+try/except+bit,
++++#+but+older+Python+distros+dont+have+hashlib.
++++try:
++++++++import+sha+as+hasher
++++except+ImportError:
++++++++import+md5+as+hasher


def+hash_password(password):
++++"""Returns+the+hashed+version+of+a+string
++++"""
++++return+hasher.new(+str(password)+).hexdigest()

def+load_auth_file(path):
++++"""Loads+a+comma-seperated+file.
++++Important:+make+sure+the+username
++++doesn't+contain+any+commas!
++++"""
++++#+Open+the+file,+or+return+an+empty+auth+list.
++++try:
++++++++f+=+open(path)
++++except+IOError:
++++++++print+"Warning:+auth+file+not+found"
++++++++return+{}

++++ret+=+{}
++++for+line+in+f.readlines():
++++++++split_line+=+line.split(",")
++++++++if+len(split_line)+>+2:
++++++++++++print+"Warning:+Malformed+line:"
++++++++++++print+split_line
++++++++++++continue+#+skip+it..
++++++++else:
++++++++++++username,+password+=+split_line
++++++++++++ret[username]+=+password
++++++++#end+if
++++#end+for
++++return+ret

def+main():
++++auth_file+=+"/home/blah/.myauth.txt"
++++u+=+raw_input("Username:")
++++p+=+raw_input("Password:")+#+getpass+is+probably+better..
++++if+auth_file.has_key(u.strip()):
++++++++if+auth_file[u]+==+hash_password(p):
++++++++++++#+The+hash+matches+the+stored+one
++++++++++++print+"Welcome,+sir!"|code-block|syntax|javascript|1548542|与使用逗号分隔的文件不同，我建议使用SQLite3+(它可以用于其他设置等。|1548543|此外，请记住这不是非常安全-如果应用程序是本地的，恶意用户可能只需替换~/.myauth.txt文件。本地应用程序身份验证很难做好。您必须使用用户密码对它读取的任何数据进行加密，并且通常要非常小心。|offset|length|style|CODE|1548544|entityMap^0|0|0|0|Z|D|0^^$0|@$1|2|3|4|5|6|7|Q|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|R|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|S|8|@]|9|@]|A|$]]|$1|I|3|J|5|6|7|T|8|@$K|U|L|V|M|N]]|9|@]|A|$]]|$1|O|3|-4|5|6|7|W|8|@]|9|@]|A|$]]]|P|$]]

Treat the following as pseudo-code..

<pre><code>try:
 from hashlib import sha as hasher
except ImportError:
 # You could probably exclude the try/except bit,
 # but older Python distros dont have hashlib.
 try:
 import sha as hasher
 except ImportError:
 import md5 as hasher


def hash_password(password):
 """Returns the hashed version of a string
 """
 return hasher.new( str(password) ).hexdigest()

def load_auth_file(path):
 """Loads a comma-seperated file.
 Important: make sure the username
 doesn't contain any commas!
 """
 # Open the file, or return an empty auth list.
 try:
 f = open(path)
 except IOError:
 print "Warning: auth file not found"
 return {}

 ret = {}
 for line in f.readlines():
 split_line = line.split(",")
 if len(split_line) &gt; 2:
 print "Warning: Malformed line:"
 print split_line
 continue # skip it..
 else:
 username, password = split_line
 ret[username] = password
 #end if
 #end for
 return ret

def main():
 auth_file = "/home/blah/.myauth.txt"
 u = raw_input("Username:")
 p = raw_input("Password:") # getpass is probably better..
 if auth_file.has_key(u.strip()):
 if auth_file[u] == hash_password(p):
 # The hash matches the stored one
 print "Welcome, sir!"
</code></pre>

Instead of using a comma-separated file, I would recommend using SQLite3 (which could be used for other settings and such.

Also, remember that this isn't very secure - if the application is local, evil users could probably just replace the <code>~/.myauth.txt</code> file.. Local application auth is difficult to do well. You'll have to encrypt any data it reads using the users password, and generally be very careful.

blocks|key|1548556|text|import+hashlib
import+random

def+gen_salt():
++++salt_seed+=+str(random.getrandbits(128))
++++salt+=+hashlib.sha256(salt_seed).hexdigest()
++++return+salt

def+hash_password(password,+salt):
++++h+=+hashlib.sha256()
++++h.update(salt)
++++h.update(password)
++++return+h.hexdigest()

#in+datastore
password_stored_hash+=+"41e2282a9c18a6c051a0636d369ad2d4727f8c70f7ddeebd11e6f49d9e6ba13c"
salt_stored+=+"fcc64c0c2bc30156f79c9bdcabfadcd71030775823cb993f11a4e6b01f9632c3"

password_supplied+=+'password'

password_supplied_hash+=+hash_password(password_supplied,+salt_stored)
authenticated+=+(password_supplied_hash+==+password_stored_hash)
print+authenticated+#True|type|code-block|depth|inlineStyleRanges|entityRanges|data|syntax|javascript|1548557|另请参阅gae-authenticate-to-a-3rd-party-site|unstyled|offset|length|1548558|entityMap|0|LINK|mutability|MUTABLE|url|https://stackoverflow.com/questions/1990722/gae-authenticate-to-a-3rd-party-site^0|0|4|10|0|0^^$0|@$1|2|3|4|5|6|7|Q|8|@]|9|@]|A|$B|C]]|$1|D|3|E|5|F|7|R|8|@]|9|@$G|S|H|T|1|U]]|A|$]]|$1|I|3|-4|5|F|7|V|8|@]|9|@]|A|$]]]|J|$K|$5|L|M|N|A|$O|P]]]]

<pre><code>import hashlib
import random

def gen_salt():
 salt_seed = str(random.getrandbits(128))
 salt = hashlib.sha256(salt_seed).hexdigest()
 return salt

def hash_password(password, salt):
 h = hashlib.sha256()
 h.update(salt)
 h.update(password)
 return h.hexdigest()

#in datastore
password_stored_hash = "41e2282a9c18a6c051a0636d369ad2d4727f8c70f7ddeebd11e6f49d9e6ba13c"
salt_stored = "fcc64c0c2bc30156f79c9bdcabfadcd71030775823cb993f11a4e6b01f9632c3"

password_supplied = 'password'

password_supplied_hash = hash_password(password_supplied, salt_stored)
authenticated = (password_supplied_hash == password_stored_hash)
print authenticated #True
</code></pre>

see also <a href="https://stackoverflow.com/questions/1990722/gae-authenticate-to-a-3rd-party-site">gae-authenticate-to-a-3rd-party-site</a>

blocks|key|1763522|text|用“md5”比用base64好多了|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1763523|>>>+import+md5
>>>+hh+=+md5.new()
>>>+hh.update('anoop')
>>>+hh.digest
<built-in+method+digest+of+_hashlib.HASH+object+at+0x01FE1E40>|code-block|syntax|javascript|1763524|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

Use " md5 " it's much better than base64

<pre><code>&gt;&gt;&gt; import md5
&gt;&gt;&gt; hh = md5.new()
&gt;&gt;&gt; hh.update('anoop')
&gt;&gt;&gt; hh.digest
&lt;built-in method digest of _hashlib.HASH object at 0x01FE1E40&gt;
</code></pre>

I'm looking for a python library that will help me to create an authentication method for a desktop app I'm writing.
I have found several method in web framework such as django or turbogears.

I just want a kind of username-password association stored into a local file.
I can write it by myself, but I'm really it already exists and will be a better solution (I'm not very fluent with encryption).

Python Authentication API

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

我正在寻找一个python库，它可以帮助我为我正在编写的桌面应用程序创建身份验证方法。我在web框架中发现了几种方法，比如django或turbogears。我只想要一种用户名-密码关联存储到本地文件中。我可以自己写，但我真的觉得它已经存在了，而且会是一个更好的解决方案(我对加密不是很熟练)。

问Python身份验证API
EN

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问Python身份验证APIEN

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问Python身份验证API
EN