SECURITY_PASSWORD_SALT when using bcrypt

[genxstylez]

as titled, I believe bcrypt generates its own salt every time the password is generated. I think it's better to detect if bcrypt is used then there should not be a runtime error like the one below.

RuntimeError: The configuration valueSECURITY_PASSWORD_SALTmust not be None when the value ofSECURITY_PASSWORD_HASHis set to "bcrypt
related: #268

[DeimosA]

SECURITY_PASSWORD_SALT is used for "double salting" or "salting & peppering" (whatever you prefer). This is a common salt used in addition to the salt that bcrypt (or other algorithms) generate.

[mattupstate]

Thanks @DeimosA for explaining this.

[jplatte]

Why is this done though? A quick lookup of "double salting" turns up this SO question with only one answer implying that it is basically useless.