Function set_master_password

web/pgadmin/browser/__init__.py:680–884

Set the master password and store in the memory This password will be used to encrypt/decrypt saved server passwords

()

@blueprint.route("/master_password", endpoint="set_master_password",
                 methods=["POST"])
def set_master_password():
    """
    Set the master password and store in the memory
    This password will be used to encrypt/decrypt saved server passwords
    """
    data = None
    if request.form:
        data = request.form
    elif request.data:
        data = request.data
        if hasattr(request.data, 'decode'):
            data = request.data.decode('utf-8')

        if data != '':
            data = json.loads(data)

    keyring_name = ''
    errmsg = ''
    master_password_hook = False
    if not config.SERVER_MODE:
        if config.USE_OS_SECRET_STORAGE:
            try:
                # Try to get master key is from local os storage
                master_key = get_master_password_key_from_os_secret()
                master_password = data.get('password', None)
                keyring_name = config.KEYRING_NAME
                if not master_key:
                    # Generate new one and migration required
                    master_key = secrets.token_urlsafe(12)
                    keyring.delete_password(KEY_RING_SERVICE_NAME,
                                            'entry_to_check_keychain_access')
                    # migrate existing server passwords
                    from pgadmin.browser.server_groups.servers.utils \
                        import migrate_saved_passwords
                    migrated_save_passwords, error = migrate_saved_passwords(
                        master_key, master_password)

                    if migrated_save_passwords:
                        # Update keyring
                        keyring.set_password(KEY_RING_SERVICE_NAME,
                                             KEY_RING_USER_NAME,
                                             master_key)
                        # set crypt key
                        set_crypt_key(master_key)
                        return form_master_password_response(
                            existing=True,
                            present=True,
                            keyring_name=keyring_name)
                    else:
                        if not error:
                            # Update keyring
                            keyring.set_password(KEY_RING_SERVICE_NAME,
                                                 KEY_RING_USER_NAME,
                                                 master_key)
                            set_crypt_key(master_key)
                            return form_master_password_response(
                                present=True)
                        # Migration failed