[Django] #29161: Remove BCryptPasswordHasher from the default PASSWORD_HASHERS

15 views
Skip to first unread message

Django

unread,
Feb 24, 2018, 10:22:17 AM2/24/18
to django-...@googlegroups.com
#29161: Remove BCryptPasswordHasher from the default PASSWORD_HASHERS
-------------------------------------+-------------------------------------
Reporter: Tim | Owner: Tim Graham
Graham |
Type: | Status: assigned
Cleanup/optimization |
Component: | Version: master
contrib.auth |
Severity: Normal | Keywords:
Triage Stage: Accepted | Has patch: 0
Needs documentation: 0 | Needs tests: 0
Patch needs improvement: 0 | Easy pickings: 0
UI/UX: 0 |
-------------------------------------+-------------------------------------
`BCryptSHA256PasswordHasher` is recommended since Django 1.6, so potential
for backwards compatibility is minimal (considering that you have to
define a `PASSWORD_HASHERS` to use bcrypt in the first place.

--
Ticket URL: <https://code.djangoproject.com/ticket/29161>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

Django

unread,
Feb 24, 2018, 10:25:29 AM2/24/18
to django-...@googlegroups.com
#29161: Remove BCryptPasswordHasher from the default PASSWORD_HASHERS
-------------------------------------+-------------------------------------
Reporter: Tim Graham | Owner: Tim
Type: | Graham
Cleanup/optimization | Status: assigned
Component: contrib.auth | Version: master
Severity: Normal | Resolution:
Keywords: | Triage Stage: Accepted
Has patch: 1 | Needs documentation: 0

Needs tests: 0 | Patch needs improvement: 0
Easy pickings: 0 | UI/UX: 0
-------------------------------------+-------------------------------------
Changes (by Tim Graham):

* has_patch: 0 => 1


Comment:

[https://github.com/django/django/pull/9728 PR]

--
Ticket URL: <https://code.djangoproject.com/ticket/29161#comment:1>

Django

unread,
Feb 26, 2018, 3:04:23 AM2/26/18
to django-...@googlegroups.com
#29161: Remove BCryptPasswordHasher from the default PASSWORD_HASHERS
-------------------------------------+-------------------------------------
Reporter: Tim Graham | Owner: Tim
Type: | Graham
Cleanup/optimization | Status: assigned
Component: contrib.auth | Version: master
Severity: Normal | Resolution:
Keywords: | Triage Stage: Ready for
| checkin
Has patch: 1 | Needs documentation: 0

Needs tests: 0 | Patch needs improvement: 0
Easy pickings: 0 | UI/UX: 0
-------------------------------------+-------------------------------------
Changes (by Claude Paroz):

* stage: Accepted => Ready for checkin


--
Ticket URL: <https://code.djangoproject.com/ticket/29161#comment:2>

Django

unread,
Feb 26, 2018, 9:05:36 AM2/26/18
to django-...@googlegroups.com
#29161: Remove BCryptPasswordHasher from the default PASSWORD_HASHERS
-------------------------------------+-------------------------------------
Reporter: Tim Graham | Owner: Tim
Type: | Graham
Cleanup/optimization | Status: closed
Component: contrib.auth | Version: master
Severity: Normal | Resolution: fixed

Keywords: | Triage Stage: Ready for
| checkin
Has patch: 1 | Needs documentation: 0

Needs tests: 0 | Patch needs improvement: 0
Easy pickings: 0 | UI/UX: 0
-------------------------------------+-------------------------------------
Changes (by GitHub <noreply@…>):

* status: assigned => closed
* resolution: => fixed


Comment:

In [changeset:"5b589a47b9ac2c8bdd13ba837fea37991a1457b9" 5b589a47]:
{{{
#!CommitTicketReference repository=""
revision="5b589a47b9ac2c8bdd13ba837fea37991a1457b9"
Fixed #29161 -- Removed BCryptPasswordHasher from PASSWORD_HASHERS.
}}}

--
Ticket URL: <https://code.djangoproject.com/ticket/29161#comment:3>

Reply all
Reply to author
Forward
0 new messages