Merge pull request #44 from akatsoulas/use-sha1

Replace sh224 with sha1 in username_algo.
mozilla · Nov 4, 2016 · 01ed6d1 · 01ed6d1
2 parents 8326b68 + 30f2104
commit 01ed6d1
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/mozilla_django_oidc/auth.py b/mozilla_django_oidc/auth.py
@@ -28,7 +28,7 @@ def default_username_algo(email):
     # this protects against data leakage because usernames are often
     # treated as public identifiers (so we can't use the email address).
     return base64.urlsafe_b64encode(
-        hashlib.sha224(smart_bytes(email)).digest()
+        hashlib.sha1(smart_bytes(email)).digest()
     ).rstrip(b'=')