upgrade to argon password hasher

Fixes #3362
zulip · Jan 20, 2017 · 6a3e8c5 · 6a3e8c5
1 parent b4b6516
commit 6a3e8c5
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/requirements/common.txt b/requirements/common.txt
@@ -175,3 +175,6 @@ pycodestyle==2.1.0
 # Needed for link preview
 beautifulsoup4==4.5.1
 git+https://github.com/rafaelmartins/pyoembed.git@eb9901917c2a44b49e2887c077ead84a722c50dc#egg=pyoembed
+
+# Needed for password hashing
+argon2-cffi==16.3.0
diff --git a/zproject/settings.py b/zproject/settings.py
@@ -489,6 +489,7 @@ def get_secret(key):
     # Use fast password hashing for creating testing users when not
     # PRODUCTION.  Saves a bunch of time.
     PASSWORD_HASHERS = (
+                'django.contrib.auth.hashers.Argon2PasswordHasher',
                 'django.contrib.auth.hashers.SHA1PasswordHasher',
                 'django.contrib.auth.hashers.PBKDF2PasswordHasher'
             )