id,summary,reporter,owner,description,type,status,component,version,severity,resolution,keywords,cc,stage,has_patch,needs_docs,needs_tests,needs_better_patch,easy,ui_ux 21398,Fix py-bcrypt compatibility on Python 3,arjan@…,nobody,"When using the BCryptSHA256PasswordHasher or derivatives, the verification of passwords fails when on Python 3. This is due to the following line: return constant_time_compare(data, bcrypt.hashpw(password, data)) In BCryptSHA256PasswordHasher.verify(), 'data' is forced to the 'bytes' type, but the output of bcrypt.hashpw() is of type 'str'. The hashpw() output should just like 'data' be passed through force_bytes() before comparison, because the comparison is now always returning False on Python3.",Bug,closed,Python 3,1.6,Release blocker,fixed,,Donald Stufft,Ready for checkin,1,0,0,0,0,0