Code

Opened 18 months ago

Closed 18 months ago

Last modified 17 months ago

#19562 closed Cleanup/optimization (fixed)

Documentation: How Django stores passwords out of date

Reported by: startup.canada@… Owned by: ptone
Component: Documentation Version: master
Severity: Normal Keywords:
Cc: Triage Stage: Accepted
Has patch: no Needs documentation: no
Needs tests: no Patch needs improvement: no
Easy pickings: no UI/UX: no

Description

In "Password management in Django" documentation page https://docs.djangoproject.com/en/1.5/topics/auth/passwords/ , section "How Django stores passwords" it says: "The password attribute of a User object is a string in this format:
algorithm$hash"

This is out of date (since v1.4?) It should say something like:

"The password attribute of a User object is a string in this format:
algorithm$iterations$salt$hash" , where iterations is the work factor.

Thanks

Attachments (0)

Change History (4)

comment:1 Changed 18 months ago by ptone

  • Component changed from contrib.auth to Documentation
  • Needs documentation unset
  • Needs tests unset
  • Owner changed from nobody to ptone
  • Patch needs improvement unset
  • Status changed from new to assigned
  • Triage Stage changed from Unreviewed to Accepted
  • Version changed from 1.5-alpha-1 to master

Looks like this was missed in the 1.4 timeframe and wasn't caught during the recent refactor either.

comment:2 Changed 18 months ago by Preston Holmes <preston@…>

  • Resolution set to fixed
  • Status changed from assigned to closed

In f02e1167d788280e33de3df68fa41e89cb083619:

[1.5.x] Fixed #19562 -- cleaned up password storage docs

Conflicts:

docs/topics/auth/passwords.txt

comment:3 Changed 18 months ago by Preston Holmes <preston@…>

In c8eff0dbcb0936aac2748a7a896d08f34b54c50f:

Fixed #19562 -- cleaned up password storage docs

comment:4 Changed 17 months ago by Preston Holmes <preston@…>

In f02e1167d788280e33de3df68fa41e89cb083619:

[1.5.x] Fixed #19562 -- cleaned up password storage docs

Conflicts:

docs/topics/auth/passwords.txt

Add Comment

Modify Ticket

Change Properties
<Author field>
Action
as closed
as The resolution will be set. Next status will be 'closed'
The resolution will be deleted. Next status will be 'new'
Author


E-mail address and user name can be saved in the Preferences.

 
Note: See TracTickets for help on using tickets.