Opened 9 years ago
Last modified 9 years ago
#24115 closed New feature
Bcrypt hashers don't implement must_update — at Version 1
| Reported by: | Alex Rothberg | Owned by: | nobody |
|---|---|---|---|
| Component: | contrib.auth | Version: | dev |
| Severity: | Normal | Keywords: | |
| Cc: | Triage Stage: | Accepted | |
| Has patch: | yes | Needs documentation: | no |
| Needs tests: | no | Patch needs improvement: | no |
| Easy pickings: | no | UI/UX: | no |
Description (last modified by )
If the number of rounds is changed for the bcrypt hashers it does not appear that the must_update will never return True. This is because the default implementation is used.
For comparison, see passlib which does in fact perform migrations for bcrypt.
Note:
See TracTickets
for help on using tickets.