3f52aceca4
- Changed password setup to use libsodium and argon2id (regular SHA256 hashing for passwords is inadequate as modern GPU's can hash generate billions of hashes per second). - Added code to auto migrate old passwords to the new password_hash if the existing password_hash matches either of the legacy password generation schemes (SHA1 or SHA256). - Added migration to support new password_hash format length - Added column password_revision. This field will default to 0, which all passwords will have till they're updated. After that each password hash method has a revision. |
||
---|---|---|
.. | ||
api | ||
func | ||
middleware | ||
migrations | ||
model | ||
rest | ||
search | ||
tests | ||
__init__.py | ||
config.py | ||
db.py | ||
errors.py | ||
facade.py |