Sign-up/Login system with Tornado - Tornado Web Server

The old Google Groups will be going away soon, but your browser is incompatible with the new version.
Message from discussion Sign-up/Login system with Tornado
Received-SPF: pass (google.com: domain of zeeero.co...@gmail.com designates 209.85.210.48 as permitted sender) client-ip=209.85.210.48;
MIME-Version: 1.0
In-Reply-To: <81ED022F-FC83-4802-B3E6-DAED66FD0...@gmail.com>
References: <4FD5E648.2020...@gmail.com>
	<b536698e-ee33-42cf-8383-b734c7272be9@googlegroups.com>
	<81ED022F-FC83-4802-B3E6-DAED66FD0...@gmail.com>
Date: Mon, 11 Jun 2012 15:14:55 -0400
Message-ID: <CAGVravdjm-nhMHx5c5kNfB2gKDYix4uuaJMH+t0K+Zb2PQZ...@mail.gmail.com>
Subject: Re: [tornado] Re: Sign-up/Login system with Tornado
From: Arek Bochinski <zeeero.co...@gmail.com>
To: python-tornado@googlegroups.com
Content-Type: multipart/alternative; boundary=e89a8ffba94d4b240704c2372a16

--e89a8ffba94d4b240704c2372a16
Content-Type: text/plain; charset=ISO-8859-1

I use multi-step password creation. First time a password is created, it is
done with PBKDF2 and with salt/key/iteration
settings to make it fast and cheap on CPU time. Then, I defer a second job
to a Gearman worker that does
an update with a more costly update of the password that hogs the CPU.

On Mon, Jun 11, 2012 at 12:59 PM, Dmitri Cherniak <dmit...@gmail.com> wrote:

> I used bcrypt directly in a sample blog post once, but in production I
> pass it off to an internal HTTP service using asynchttpclient.
>
> On Jun 11, 2012, at 11:58 AM, Andy Boot wrote:
>
> I'm fairly new to tornado but I don't think its a major problem.
>
> I am using bcrypt (with a small salt) directly in my app and I have seen
> apps on github that also use bcrypt without delegating the encryption to
> something like *Celery *
>
> What blogs have you read on the subject?
>
> andy,
>
>
> On Monday, 11 June 2012 13:36:24 UTC+1, Antonio Pintus wrote:
>>
>> Hi,
>>
>> I need to realize a Sign-up/login system for my Tornado Web-based
>> application.
>> I've found some examples based on bcrypt, also reading that it's too
>> heavy for Tornado IO Loop feature.
>> Can anyone suggest me a feasible way, please?
>>
>>
>> Any suggestion, link, hint are welcome!
>>
>> Thank you!
>>
>> Cheers,
>>
>> Antonio
>>
>>
>>
>>
>> --
>>
>> Antonio Pintus
>>
>> e-mail: pin...@gmail.com
>> Home Page: http://www.pintux.it
>> Blog: http://jaranto.blogspot.com
>> Photography: http://www.flickr.com/photos/**pintux/<http://www.flickr.com/photos/pintux/>
>> Twitter: twitter.com/apintux
>>
>>
>

--e89a8ffba94d4b240704c2372a16
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

I use multi-step password creation. First time a password is created, it is=
 done with PBKDF2 and with salt/key/iteration<br>settings to make it fast a=
nd cheap on CPU time. Then, I defer a second job to a Gearman worker that d=
oes<br>
an update with a more costly update of the password that hogs the CPU.<br><=
br><div class=3D"gmail_quote">On Mon, Jun 11, 2012 at 12:59 PM, Dmitri Cher=
niak <span dir=3D"ltr">&lt;<a href=3D"mailto:dmit...@gmail.com" target=3D"_=
blank">dmit...@gmail.com</a>&gt;</span> wrote:<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex"><div style=3D"word-wrap:break-word">I used b=
crypt directly in a sample blog post once, but in production I pass it off =
to an internal HTTP service using asynchttpclient.<div>
<div class=3D"h5"><div><br><div><div>On Jun 11, 2012, at 11:58 AM, Andy Boo=
t wrote:</div><br><blockquote type=3D"cite">I&#39;m fairly new to tornado b=
ut I don&#39;t think its a major problem.<div><br></div><div>I am using bcr=
ypt (with a small salt) directly in my app and I have seen apps on github t=
hat also use bcrypt without delegating the encryption to something like=A0<=
i style=3D"line-height:16px;font-size:small;font-style:normal;font-family:a=
rial,sans-serif">Celery=A0</i>=A0</div>
<div><br></div><div>What blogs have you read on the subject?</div><div><br>=
</div><div>andy,</div><div><br></div><div><br>On Monday, 11 June 2012 13:36=
:24 UTC+1, Antonio Pintus  wrote:<blockquote class=3D"gmail_quote" style=3D=
"margin:0;margin-left:0.8ex;border-left:1px #ccc solid;padding-left:1ex">
Hi,
<br>
<br>I need to realize a Sign-up/login system for my Tornado Web-based=20
<br>application.
<br>I&#39;ve found some examples based on bcrypt, also reading that it&#39;=
s too=20
<br>heavy for Tornado IO Loop feature.
<br>Can anyone suggest me a feasible way, please?
<br>
<br>
<br>Any suggestion, link, hint are welcome!
<br>
<br>Thank you!
<br>
<br>Cheers,
<br>
<br>Antonio
<br>
<br>
<br>
<br>
<br>--=20
<br>
<br>Antonio Pintus
<br>
<br>e-mail: <a href=3D"mailto:pin...@gmail.com" target=3D"_blank">pintus@gm=
ail.com</a>
<br>Home Page: <a href=3D"http://www.pintux.it/" target=3D"_blank">http://w=
ww.pintux.it</a>
<br>Blog: <a href=3D"http://jaranto.blogspot.com/" target=3D"_blank">http:/=
/jaranto.blogspot.com</a>
<br>Photography: <a href=3D"http://www.flickr.com/photos/pintux/" target=3D=
"_blank">http://www.flickr.com/photos/<u></u>pintux/</a>
<br>Twitter: <a href=3D"http://twitter.com/apintux" target=3D"_blank">twitt=
er.com/apintux</a>
<br>
<br></blockquote></div></blockquote></div><br></div></div></div></div></blo=
ckquote></div><br>

--e89a8ffba94d4b240704c2372a16--
Create a group - Google Groups - Google Home - Terms of Service - Privacy Policy
Account Options
