Use bcrypt to store passwords and IP address hashes

pytition · Feb 13, 2019 · e995d0a · e995d0a
1 parent 07f83c6
commit e995d0a
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 0 deletions.
diff --git a/pytition/pytition/settings/base.py b/pytition/pytition/settings/base.py
@@ -56,6 +56,14 @@
     'django.middleware.clickjacking.XFrameOptionsMiddleware',
 ]
 
+PASSWORD_HASHERS = [
+    'django.contrib.auth.hashers.BCryptSHA256PasswordHasher',
+    'django.contrib.auth.hashers.BCryptPasswordHasher',
+    'django.contrib.auth.hashers.PBKDF2PasswordHasher',
+    'django.contrib.auth.hashers.PBKDF2SHA1PasswordHasher',
+    'django.contrib.auth.hashers.Argon2PasswordHasher',
+]
+
 ROOT_URLCONF = 'pytition.urls'
 
 TEMPLATES = [

diff --git a/requirements.txt b/requirements.txt
@@ -7,3 +7,4 @@ django-widget-tweaks==1.4.3
 beautifulsoup4~=4.6.3
 django-formtools==2.1
 coverage==4.5.2
+bcrypt