https://github.com/michelereginabora/secure-login
This project consists of a secure login system developed in Python. The security consists of encryption through the bcrypt, data encryption library and two factor authentication.
https://github.com/michelereginabora/secure-login
api datasecurity password python security
Last synced: 13 days ago
JSON representation
This project consists of a secure login system developed in Python. The security consists of encryption through the bcrypt, data encryption library and two factor authentication.
- Host: GitHub
- URL: https://github.com/michelereginabora/secure-login
- Owner: michelereginabora
- License: mit
- Created: 2023-05-19T10:41:28.000Z (about 3 years ago)
- Default Branch: master
- Last Pushed: 2023-12-17T21:41:26.000Z (over 2 years ago)
- Last Synced: 2025-10-13T12:06:33.412Z (9 months ago)
- Topics: api, datasecurity, password, python, security
- Language: Python
- Homepage:
- Size: 97.7 KB
- Stars: 2
- Watchers: 1
- Forks: 0
- Open Issues: 2
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# Secure Login
# About project
This project consists of a secure login system developed in Python. So far, the basic structure of registration and name and password verification has been developed. The first security mechanism consists of encrypting passwords using _bcrypt_, a data encryption library.
Then two-factor authentication (2FA) was implemented.
## Examples
* create_table(): Creates a table in the SQLite database to store user information if the table doesn't exist.
* create_password_hash(passw): Generates an encrypted password hash using the bcrypt library.
* register_user(name, passw, number_phone): Registers a new user in the database, storing the name, encrypted password, and phone number.
* verify_hash_passw(passw, hash_passw): Verifies if a password matches an encrypted password hash.
* verify_user(name, passw): Verifies if the provided username and password correspond to a registered user in the database.
* create_verify_service(): Creates a verification service using the Twilio API and returns the service_sid for the created service.
* send_verification_sms(number_phone): Sends a verification request via SMS to the provided phone number using the Twilio verification service.
Flask Routes:
* /: Initial route that renders the index.html template.
* /register: Route for registering a new user. Form data is extracted and validated before calling the register_user function to insert the user details into the database.
* /verify: Route for authenticating a user. Form data is extracted and verified by calling the verify_user function. If the authentication is successful, a success message is rendered; otherwise, a failure message is displayed.
* /twofactor: Route for performing two-factor authentication (2FA). The phone number and OTP code are extracted from the form.
The send_verification_sms function is called to send the verification request via SMS.
Then, the provided OTP code is verified, and a message indicating whether the verification was approved or failed is rendered.
#### *note: project under development and resolving problems in production*
### Interface
A simple visualization, because the focus is on the backend.
# Technologies
- Python 3.9.11
- Librarys Python: sqlite3, bcrypt, flask.render_template, twilio.rest.Client, requests.
- Framework Flask 2.3.2
- SQlite 3.35.5.
- API Twilio
- DB Browser for SQLite Version 3.12.2
- IDE PyCharm 2022.3.1 (Community Edition)
# How to run the project
Make sure you have Python installed.
Also, install Pipenv if you don't already have it by running the following command:
*pip install pipenv*
1. Clone the repository:
*git clone: https://github.com/Micheleregina2022/cybersecurityProject.git*
2. Navigate to the project directory:
*cd repository-name*
3. Install project dependencies using Pipenv:
*pipenv install --dev*
4. Activate the Pipenv virtual environment:
*pipenv shell*
5. Install dependencies:
*pip install -r requirements.txt*
6. Run the application:
*python app.py*
## Using the API and Testing the Project
To use the API and test the project, please follow the instructions below:
1. Twilio Account Setup:
If you haven't already, create a Twilio account at Twilio.com (it's free!).
Retrieve your Account SID and Auth Token from the Twilio dashboard.
2. Environment Setup:
Open the app.py file in a text editor.
Replace the values of the account_sid, auth_token, and service_sid variables with your Twilio account information.
Open the terminal and navigate to the project folder.
Start the server by running the following command:
*python app.py*
The server will run on port 5000.
3. Using the Project:
Open your web browser and visit http://localhost:5000 to access the project's home page.
You will see fields for registration and login.
To test the two-factor verification, enter your phone number and the OTP (verification code) received via SMS.
Based on the verification, you will receive a message indicating whether access is granted or denied.
# Author
Michele Regina Bora
https://www.linkedin.com/in/michele-regina-bora/