Django设置中SMTP服务器密码的加密

Question

我有一个视图，根据表单生成电子邮件并将其发送给三个服务供应商：

def quote(request):
    if request.method == 'POST':
    .
    .
    .
    send_mail(
    'Quote Request: ....',
    'Message Body',
    '[e-mail]',
    ['[e-mail], [e-mail], [e-mail]]
    )

在我的设置中，我定义了TLS、主机、用户、密码和端口号：

EMAIL_USE_TLS = True
EMAIL_HOST = 'stmp.office365.com'
EMAIL_HOST_USER = '[e-mail]'
EMAIL_HOST_PASSWORD = 'My Plain Text Password That I Want to Encrypt Here!'
EMAIL_PORT = 587

这个过程很好 - 但我需要加密明文密码。最好的方法是什么？

- mk8efz

---

考虑使用环境变量来保护信息安全。这篇指南可以帮助你：在Python中使用环境变量。 - Alan Avalos

Answer 1

我也遇到了同样的问题，我的意思是人们总是知道原始密码...例如：使用函数进行加密并将原始密码返回到新变量中，当然人们只需打印该变量即可知道原始密码...

但是如果您使用例如表单（在发送电子邮件消息之前要求输入密码）来处理它，我认为这是可能的...这就是我想到的。

Django有一个处理密码的函数，它是make_password。

>>> from django.contrib.auth import hashers
>>> pwd = hashers.make_password('your-original-password')
>>> pwd
'pbkdf2_sha256$30000$74DtkZMARQHr$rC3CEdtDnDjRYE5U2ZRiWxuT+HQf3Aq1KTStpypZDV8='
>>>

将这个编码后的密码放入你的settings.py文件中；

EMAIL_HOST_PASSWORD = 'pbkdf2_sha256$30000$74DtkZMARQHr$rC3CEdtDnDjRYE5U2ZRiWxuT+HQf3Aq1KTStpypZDV8='

然后，每次您需要发送电子邮件消息时，您都需要输入原始密码，此条件检查您的原始密码是否与hashers.check_password(password, encoded)匹配。

以下脚本是一个示例；

1. forms.py

from django import forms

class QuoteForm(forms.Form):
    subject = forms.CharField(widget=forms.TextInput())
    message = forms.CharField(widget=forms.Textarea())
    password = forms.CharField(widget=forms.PasswordInput())
    ....

2. views.py

from django.shortcuts import render, redirect
from django.contrib.auth import hashers
from django.conf import settings

from yourapp.forms import QuoteForm

ENCODED_PASSWORD = settings.EMAIL_HOST_PASSWORD


def quote(request):
    template_name = 'yourtemplate.html'

    if request.method == 'POST':
        form = QuoteForm(request.POST)
        if form.is_valid():
            subject = form.cleaned_data['subject']
            message = form.cleaned_data['message']

            # in this section is important, 
            # so the password only known by it owner.
            password = form.cleaned_data['password']
            is_matched = hashers.check_password(password, ENCODED_PASSWORD)
            if is_matched:
                # change default encoded password from the settings,
                # with original password from field of `password`.
                settings.EMAIL_HOST_PASSWORD = password

                send_mail(
                  subject, message, settings.EMAIL_HOST_USER,
                  ['[e-mail], [e-mail], [e-mail]]
                )
                return redirect('/success/page/')
            return redirect('/password-failed/page/')
        else:
            context = {'form': form, 'errors': form.errors}
            return render(request, template_name, context)
    else:
        form = QuoteForm()
    return render(request, template_name, {'form':form})

我不确定这个解决方案是否更好，因为对用户来说当然很困难。

- binpy