def set_pw(self, rawPw):
"""Sets the user's password - always use this rather than using directly
as the password is hashed before storage.
"""
algo = 'sha1'
salt = get_hexdigest(algo, str(random()), str(random()))[:5]
hash = get_hexdigest(algo, salt, rawPw)
self.pw = '%s$%s$%s' % (algo, salt, hash)
self.save()
return self
def checkPw(self, rawPw):
"""Checks the user's password against a provided password - always use
this rather than directly comparing to
:attr:`~mongoengine.django.auth.User.password` as the password is
hashed before storage.
"""
algo, salt, hash = self.pw.split('$')
return hash == get_hexdigest(algo, salt, rawPw)
