Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with
or
.
Download ZIP
Browse files

Fixed #21398 -- Fixed BCryptSHA256PasswordHasher with py-bcrypt and P…

…ython 3.

Thanks arjan at anymore.nl for the report.
  • Loading branch information...
commit d15985d81ff1c3b353a48a87189b7847798214c0 1 parent af2dc4e
@timgraham timgraham authored
View
4 django/contrib/auth/hashers.py
@@ -322,8 +322,10 @@ def verify(self, password, encoded):
# Ensure that our data is a bytestring
data = force_bytes(data)
+ # force_bytes() necessary for py-bcrypt compatibility
+ hashpw = force_bytes(bcrypt.hashpw(password, data))
- return constant_time_compare(data, bcrypt.hashpw(password, data))
+ return constant_time_compare(data, hashpw)
def safe_summary(self, encoded):
algorithm, empty, algostr, work_factor, data = encoded.split('$', 4)
View
14 docs/releases/1.6.1.txt
@@ -0,0 +1,14 @@
+==========================
+Django 1.6.1 release notes
+==========================
+
+*Under development*
+
+This is Django 1.6.1, a bugfix release for Django 1.6.
+
+...
+
+Bug fixes
+=========
+
+* Fixed ``BCryptSHA256PasswordHasher`` with py-bcrypt and Python 3 (#21398).
View
1  docs/releases/index.txt
@@ -30,6 +30,7 @@ Final releases
:maxdepth: 1
1.6
+ 1.6.1
1.5 release
-----------
Please sign in to comment.
Something went wrong with that request. Please try again.