00dani/lemoncurry
1
0
Fork 1
Code Issues Pull requests Releases Wiki Activity

Switch the preferred password hash from PBKDF2 to the newer and more secure Argon2

Browse source
This commit is contained in:
Danielle McLean 2018-02-06 16:18:15 +11:00
parent cbc24d4774
commit 45daf529f8
Signed by: 00dani
GPG key ID: 5A5D2D1AFF12EEC5
3 changed files with 106 additions and 29 deletions
Download patch file Download diff file Expand all files Collapse all files

10
lemoncurry/settings/base.py
View file

@ -157,6 +157,16 @@ DATABASES = {
AUTH_USER_MODEL = 'users.User'
# Password hashers
# https://docs.djangoproject.com/en/1.11/ref/settings/#auth-password-validators
PASSWORD_HASHERS = [
'django.contrib.auth.hashers.Argon2PasswordHasher',
'django.contrib.auth.hashers.PBKDF2PasswordHasher',
'django.contrib.auth.hashers.PBKDF2SHA1PasswordHasher',
'django.contrib.auth.hashers.BCryptSHA256PasswordHasher',
'django.contrib.auth.hashers.BCryptPasswordHasher',
]
# Password validation
# https://docs.djangoproject.com/en/1.11/ref/settings/#auth-password-validators