我在 Flask 项目中使用 Flask-Security。基本上一切正常，直到我尝试打开密码加密。基本上我遵循了这个：http ://packages.python.org/Flask-Security/configuration.html 这导致我添加了这个：
app.config['SECURITY_PASSWORD_HASH'] = 'bcrypt'
app.config['SECURITY_PASSWORD_SALT'] = '$2a$16$PnnIgfMwkOjGX4SkHqSOPO'
不幸的是，这会导致错误：
File "/home/geoadmin/.virtualenvs/flask/lib/python2.7/site-packages/flask/app.py", line 1701, in __call__
return self.wsgi_app(environ, start_response)
File "/home/geoadmin/.virtualenvs/flask/lib/python2.7/site-packages/flask/app.py", line 1689, in wsgi_app
response = self.make_response(self.handle_exception(e))
File "/home/geoadmin/.virtualenvs/flask/lib/python2.7/site-packages/flask/app.py", line 1687, in wsgi_app
response = self.full_dispatch_request()
File "/home/geoadmin/.virtualenvs/flask/lib/python2.7/site-packages/flask/app.py", line 1360, in full_dispatch_request
rv = self.handle_user_exception(e)
File "/home/geoadmin/.virtualenvs/flask/lib/python2.7/site-packages/flask/app.py", line 1358, in full_dispatch_request
rv = self.dispatch_request()
File "/home/geoadmin/.virtualenvs/flask/lib/python2.7/site-packages/flask/app.py", line 1344, in dispatch_request
return self.view_functions[rule.endpoint](**req.view_args)
File "/home/geoadmin/.virtualenvs/flask/lib/python2.7/site-packages/flask_security/decorators.py", line 171, in wrapper
return f(*args, **kwargs)
File "/home/geoadmin/.virtualenvs/flask/lib/python2.7/site-packages/flask_security/views.py", line 72, in login
if form.validate_on_submit():
File "/home/geoadmin/.virtualenvs/flask/lib/python2.7/site-packages/flask_wtf/form.py", line 123, in validate_on_submit
return self.is_submitted() and self.validate()
File "/home/geoadmin/.virtualenvs/flask/lib/python2.7/site-packages/flask_security/forms.py", line 165, in validate
if not verify_password(self.password.data, self.user.password):
File "/home/geoadmin/.virtualenvs/flask/lib/python2.7/site-packages/flask_security/utils.py", line 84, in verify_password
return _pwd_context.verify(get_hmac(password), password_hash)
File "/home/geoadmin/.virtualenvs/flask/lib/python2.7/site-packages/passlib/context.py", line 2534, in verify
record = self._get_or_identify_record(hash, scheme, category)
File "/home/geoadmin/.virtualenvs/flask/lib/python2.7/site-packages/passlib/context.py", line 2258, in _get_or_identify_record
return self._identify_record(hash, category)
File "/home/geoadmin/.virtualenvs/flask/lib/python2.7/site-packages/passlib/context.py", line 1455, in identify_record
raise ValueError("hash could not be identified")
ValueError: hash could not be identified
我对发生的事情一无所知。我以为我生成了一个很好的 bcrypt 哈希，但是网站上没有密码加密的真实示例，而且错误本身让我感到困惑：/
使用的软件： - Ubuntu 12.04LTS - Python 2.7.2 - FLask 0.9 - Flask-Security 1.5.4 - 通过 MongoAlchemy 在 MongoDB 2.2 上运行
谢谢你的帮助！！
编辑：感谢 Bikeshedder，这可能是罪魁祸首：
# Create a user to test with
@app.before_first_request
def create_user():
user_datastore.create_user(email='test@test.net', password='testerdetest')
我假设 create_user 方法会自动加密密码。但显然它没有......这里的文档并不是很清楚：
Class flask_security.datastore.MongoEngineUserDatastore(db, user_model, role_model)
A MongoEngine datastore implementation for Flask-Security that assumes the use of the Flask-MongoEngine extension.
create_user(**kwargs)
Creates and returns a new user from the given parameters.
编辑 2：进一步研究 BikeShedder 的建议，我将标准用户创建更改为：
# Create a user to test with
@app.before_first_request
def create_user():
user_datastore.create_user(email='test@test.net', password=bcrypt.hashpw('testerdetest', app.config['SECURITY_PASSWORD_SALT'])
这样就解决了错误，但它给了我一个“无效密码”，这意味着烧瓶安全所做的事情与我在加密中所做的不同......啊！
编辑 3：从 bcrypt 更改为 passlib（flask-security 也使用）
app.config['SECURITY_PASSWORD_SALT'] = '/2aX16zPnnIgfMwkOjGX4S'
和
user_datastore.create_user(email='test@test.net', password=passlib.hash.bcrypt.encrypt('testerdetest', salt=app.config['SECURITY_PASSWORD_SALT']))
仍然得到一个无效的密码:(如果我查看https://github.com/mattupstate/flask-security/blob/develop/flask_security/utils.py的源代码，它似乎只使用了 sha512 加密......我不明白文档然后...
编辑 5：已解决（感谢您将我置于正确的方向！）flask.ext.security.utils.encrypt_password() 成功了。但是，我仍然怀疑它是否真的是 bcrypt，但是好吧，它至少是加密的......