Upgrade password hashing to Argon2

apiserver/apiserver/settings.py

@@ -112,6 +112,14 @@ AUTH_PASSWORD_VALIDATORS = [
     },
 ]
 
+PASSWORD_HASHERS = [
+    'django.contrib.auth.hashers.Argon2PasswordHasher',
+    'django.contrib.auth.hashers.PBKDF2PasswordHasher',
+    'django.contrib.auth.hashers.PBKDF2SHA1PasswordHasher',
+    'django.contrib.auth.hashers.BCryptSHA256PasswordHasher',
+]
+
+
 
 # Internationalization
 # https://docs.djangoproject.com/en/3.0/topics/i18n/

apiserver/requirements.txt

@@ -1,8 +1,11 @@
+argon2-cffi==19.2.0
 asgiref==3.2.3
+cffi==1.13.2
 Django==3.0.2
 django-rest-auth==0.9.5
 djangorestframework==3.11.0
 pkg-resources==0.0.0
+pycparser==2.19
 pytz==2019.3
 six==1.13.0
 sqlparse==0.3.0