Allow additional hashing algorithms for passwords

[David Cramer]

A useful addition to the auth contrib application would be the ability to pass in additional hashing algorithms for the password.

e.g.

AUTH_PASSWORD_ALGORITHMS = {

'sha': 'django.contrib.auth.blah.ShaHashThing',
'md5': '...',
'myalgo': '...',

}

[Russell Keith-Magee]

Repeating comments I made on django-dev:

Personally, I see this as a pretty low priority item, verging on wontfix. My usual position is that having more pluggable interfaces is a good thing, but in this case, IMHO, there isn't enough change and innovation in hashing algorithms to warrant a fully configurable interface for defining password hashes. There might even be an argument to _not_ make it configurable to discourage people from trying to write their own hashing algorithms.

contrib.auth currently supports MD5, SHA1 and crypt, which IMHO covers all the important bases. If you think there is an obvious candidate that is missing, I think I'd rather see us add specific support for that algorithm rather than a pluggable interface.

[David Cramer]

For us (and we monkey patched to do this) our reasoning was having old passwords which had a slightly different algorithm than the built-in md5 or sha1. We wanted to support those still, since they could be.

[Antti Kaihola]

#6028 is somewhat related (adding compatibility with glibc MD5-based crypt shadow passwords).

[Yeago]

Dupe of #6028 and a lack of support for a more comprehensive pluggable backend for this use-case.