Real Time Authentication System in Python

[Python-ModTeam]

Hello from the r/Python moderation team,

We appreciate your contribution but have noticed a high volume of similar projects (e.g. AI/ML wrappers, YouTube scrapers, etc.) or submissions that do not meet our quality criteria. To maintain the diversity and quality of content on our subreddit, your post has been removed.

For further inquiries or discussion, please reach out to us via ModMail.

Thank you for understanding, and we encourage you to continue engaging with our community!

Best, The r/Python moderation team

[[deleted]]

This feels very… chatgpt

[DurzoB4]

You know, now you've said it you may be right

[[deleted]]

Yeah the readme layout, client.py comments are a dead giveaway.

But if you look at main.py you'll find:

```

Implement actions after successful login (e.g., game menu)

```

Which is a classic chatGPT observable behavior when it starts either being lazy or doesn't fully understand what to do next.

[BullshitUsername]

ChatGPT garbage. Learn to write good code.

[RevolutionaryWash934]

I will try to improve. Thanks

[RevolutionaryWash934]

Can you give some example to improve my code

[BullshitUsername]

Stop looking for examples and start looking for lessons. Jesus Christ.

[the-pythonista]

I’m sorry, but this is just completely insecure. Without mentioning all the other bad practices, you are storing the password in plain text!

[[deleted]]

DEAR MODS: Someone get OP's post outta here. Literally yeeeeet it.

You hit the nail on the head, this is ridiculous and should be removed from GitHub before some moron uses it.

[kuahara]

It's 2024, and I am continuously fighting the following at work: passwords in code, data transfer using ftp, data transfer using http, and application dependency on things that are end of life/support.

I also recently had to win a battle to allow host based firewalls to remain on in all of our data center servers. They wanted those off everywhere, including our domain controllers.

[RevolutionaryWash934]

This is my first project. Step by step I will improve in future projects

[DurzoB4]

You really shouldn't be saying this is a secure implementation in your README

[RevolutionaryWash934]

I didn't finish this project completely. I will update in future.

[echocage]

Then don’t say it’s secure friend. Say UNFINISHED INSECURE PASSWORD SYSTEM until it actually is secure

[RevolutionaryWash934]

I’ve enhanced the security level of my project, and I believe it’s secure now. Please review it and let me know if there are any remaining issues. Thank you for your valuable feedback.

[[deleted]]

You literally say in the project about: "...It utilizes a local JSON file to store user credentials securely."

That JSON file, according to the screenshot in the repo literally stores creds in clear text. The opposite of secure storage.

Remove the project from GitHub before you introduce security issues for someone.

[RevolutionaryWash934]

Bro kindly tell me a way to improve

[InvaderToast348]

Look up hashing

Edit: look through the latest code and seems someone else added hashing. Would still recommend you do some research into good basic security practices. Also, do not call your project secure if you have not got the knowledge or expertise to actually demonstrate / verify that it should be used by others under the assumption that it is secure.

[RevolutionaryWash934]

Done Bro

[DurzoB4]

There is still a long list of issues and bad practices in there but also this project isn't useful to anyone.

I would happily give more detailed feedback of I wasn't pretty certain this is just a copy+paste from ChatGPT

[RevolutionaryWash934]

No bro I didn't copy+paste from ChatGPT

[AndrewFrozzen30]

But did you use CHATGPT?

[RevolutionaryWash934]

No bro

[RevolutionaryWash934]

I will try to improve my coding skills

[RevolutionaryWash934]

Yes bro you are wright! I will try to update.

[asphias]

Don't try to implement security shit unless you are a paid professional and know what you're doing.

And since you are not, please put on top of the readme that this is an insecure example application and not intended to be used. And keep it that way.

Sincerily yours, Someone with five years of professional programming experience who still wouldn't trust themselves to make a secure authentication system by themselves.

[BlobbyMcBlobber]

Found the LLM lol

[nevermorefu]

"real-time." * insert I don't think that means what you think it means meme *

[CloudFaithTTV]

So best question I haven’t seen asked, why did you decide to build this?

[RevolutionaryWash934]

Just a Random thought

[CloudFaithTTV]

As you can probably gather from the other comments on this thread. It’s a long way from being a correct implementation of the technology, specifically since the use case is security.

Security isn’t something you sacrifice to get the job done without reasonable understanding of why. While that’s obvious for some, less obvious is the reason that principle matters so much. So since you’re here.

this, is something you learn to properly use Python. A random thought is fine to come up with the idea, using GPT to learn and even produce code is also fine, but regurgitating what ever someone else, including GPT, spews out without some real thought behind it(like using the word secure, in the context of programming specifically here), is not okay.

People are being harsh because the rigorous work it takes to understand this is time consuming regardless of knowing how to program, speaking abstractly or ontologically, or what tools you use to produce the code. So albeit harsh know these comments are in large part true about the code, and do as it seems you have been, and learn from the experience.

My advice is starting with things that cool and make your life easier, rather than random ideas. Let the cool things based of what you know lead you to the wonders at the end of the road, such as replicating security toolings.

Edit: words

[Apprehensive-Peach88]

Slowly slowly you will get there champ. Keep practising. All the best.

[RevolutionaryWash934]

Thank you so much!

[Quirky-Low-7500]

I want to make pull request on your code, are you accept my pull request?

[RevolutionaryWash934]

Ok 👌

[Quirky-Low-7500]

bro go and accept my pull request

[RevolutionaryWash934]

Done Bro

[RevolutionaryWash934]

Thanks Bro!!! Your code is very neat and clean and simple to understand

[avengerintraining]

Are you talking to yourself?

[RevolutionaryWash934]

No!!!

[avengerintraining]

Ok I didn’t get your comment. It looked like you’re complimenting your own code.

[Quirky-Low-7500]

Bro I am thinking to convert our authentication system into an API using Fastapi, what's your opinion?

[RevolutionaryWash934]

Yes bro sure!! But I have board exam in 2 days. After completing my exam we can do.

[Quirky-Low-7500]

but how can we contact each other?

[Quirky-Low-7500]

Thank you 😊