Re: [Django] #37184: PBKDF2PasswordHasher enforces UTF-8 decodable requirement on passwords provided as bytes

0 views
Skip to first unread message

Django

unread,
9:37 AM (2 hours ago) 9:37 AM
to django-...@googlegroups.com
#37184: PBKDF2PasswordHasher enforces UTF-8 decodable requirement on passwords
provided as bytes
-------------------------------------+-------------------------------------
Reporter: Johannes Leuschner | Owner: Vishy
Type: Bug | Status: assigned
Component: contrib.auth | Version: 6.0
Severity: Release blocker | Resolution:
Keywords: PBKDF2 hasher | Triage Stage: Accepted
password bytes UTF-8 |
Has patch: 0 | Needs documentation: 0
Needs tests: 0 | Patch needs improvement: 0
Easy pickings: 0 | UI/UX: 0
-------------------------------------+-------------------------------------
Comment (by Jacob Walls):

Thanks for taking ownership Vishy. I'm on vacation next week, so I'm
hoping to have a PR approved by Friday of this week. Do you think you
could turn this around quickly? No worries if not, I'll just assign to
myself tomorrow.
--
Ticket URL: <https://code.djangoproject.com/ticket/37184#comment:4>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

Django

unread,
11:26 AM (1 hour ago) 11:26 AM
to django-...@googlegroups.com
#37184: PBKDF2PasswordHasher enforces UTF-8 decodable requirement on passwords
provided as bytes
-------------------------------------+-------------------------------------
Reporter: Johannes Leuschner | Owner: Vishy
Type: Bug | Status: assigned
Component: contrib.auth | Version: 6.0
Severity: Release blocker | Resolution:
Keywords: PBKDF2 hasher | Triage Stage: Accepted
password bytes UTF-8 |
Has patch: 0 | Needs documentation: 0
Needs tests: 0 | Patch needs improvement: 0
Easy pickings: 0 | UI/UX: 0
-------------------------------------+-------------------------------------
Comment (by Vishy):

I got this Jacob.

Seems more like a regression, {{{force_str()}}} looks redundant as the
{{{pbkdf2()}}} makes a {{{force_bytes()}}} anyway!
--
Ticket URL: <https://code.djangoproject.com/ticket/37184#comment:5>
Reply all
Reply to author
Forward
0 new messages