python - 创建 token : cannot concatenate 'str' and 'NoneType' objects 很危险

Question

我的 Flask 应用程序有一个电子邮件确认功能。为此，我必须创建一个将进入确认链接的 token 。要创建 token ，我会像这样使用 Its Dangerous:

from itsdangerous import URLSafeTimedSerializer
ts = URLSafeTimedSerializer(app.config["SECRET_KEY"])
token = ts.dumps(email, salt='email-confirm-key')
confirm = url_for('confirm', token=token, _external=True)

运行此命令后，我从以下回溯中收到一条错误消息，指出 cannot concatenate 'str' and 'NoneType' objects:

Traceback (most recent call last):
  File "/Users/pavsidhu/Documents/Web-Development/myapp/env/lib/python2.7/site-packages/flask/app.py", line 1836, in __call__
    return self.wsgi_app(environ, start_response)
  File "/Users/pavsidhu/Documents/Web-Development/myapp/env/lib/python2.7/site-packages/flask/app.py", line 1820, in wsgi_app
    response = self.make_response(self.handle_exception(e))
  File "/Users/pavsidhu/Documents/Web-Development/myapp/env/lib/python2.7/site-packages/flask/app.py", line 1403, in handle_exception
    reraise(exc_type, exc_value, tb)
  File "/Users/pavsidhu/Documents/Web-Development/myapp/env/lib/python2.7/site-packages/flask/app.py", line 1817, in wsgi_app
    response = self.full_dispatch_request()
  File "/Users/pavsidhu/Documents/Web-Development/myapp/env/lib/python2.7/site-packages/flask/app.py", line 1477, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/Users/pavsidhu/Documents/Web-Development/myapp/env/lib/python2.7/site-packages/flask/app.py", line 1381, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/Users/pavsidhu/Documents/Web-Development/myapp/env/lib/python2.7/site-packages/flask/app.py", line 1475, in full_dispatch_request
    rv = self.dispatch_request()
  File "/Users/pavsidhu/Documents/Web-Development/myapp/env/lib/python2.7/site-packages/flask/app.py", line 1461, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/Users/pavsidhu/Documents/Web-Development/myapp/myapp/views/confirmation.py", line 62, in resend
    activateEmail(email)
  File "/Users/pavsidhu/Documents/Web-Development/myapp/myapp/views/functions.py", line 34, in activateEmail
    token = ts.dumps(email, salt='email-confirm-key')
  File "/Users/pavsidhu/Documents/Web-Development/myapp/env/lib/python2.7/site-packages/itsdangerous.py", line 566, in dumps
    rv = self.make_signer(salt).sign(payload)
  File "/Users/pavsidhu/Documents/Web-Development/myapp/env/lib/python2.7/site-packages/itsdangerous.py", line 412, in sign
    return value + sep + self.get_signature(value)
  File "/Users/pavsidhu/Documents/Web-Development/myapp/env/lib/python2.7/site-packages/itsdangerous.py", line 347, in get_signature
    key = self.derive_key()
  File "/Users/pavsidhu/Documents/Web-Development/myapp/env/lib/python2.7/site-packages/itsdangerous.py", line 334, in derive_key
    self.secret_key).digest()
TypeError: cannot concatenate 'str' and 'NoneType' objects

我不确定问题出在哪里，因为 email 是一个字符串，而 salt 也是一个字符串。可能是什么问题呢？谢谢。

Answer 1

问题是这一行:

ts = URLSafeTimedSerializer(app.config["SECRET_KEY"])

看起来您的 app.config["SECRET_KEY"] 设置不正确。如果你用这个替换那行

ts = URLSafeTimedSerializer('test')

您应该会发现它有效。所以你需要找出为什么 app.config["SECRET_KEY"] 没有被正确设置。