Upgrade password hashing to Argon2

2020-01-07 08:04:18 +00:00
parent ab750aa8ba
commit 39931077cc
2 changed files with 11 additions and 0 deletions
--- a/apiserver/apiserver/settings.py
+++ b/apiserver/apiserver/settings.py
@@ -112,6 +112,14 @@ AUTH_PASSWORD_VALIDATORS = [
    },
 ]

+PASSWORD_HASHERS = [
+    'django.contrib.auth.hashers.Argon2PasswordHasher',
+    'django.contrib.auth.hashers.PBKDF2PasswordHasher',
+    'django.contrib.auth.hashers.PBKDF2SHA1PasswordHasher',
+    'django.contrib.auth.hashers.BCryptSHA256PasswordHasher',
+]
+
+

 # Internationalization
 # https://docs.djangoproject.com/en/3.0/topics/i18n/
--- a/apiserver/requirements.txt
+++ b/apiserver/requirements.txt
@@ -1,8 +1,11 @@
+argon2-cffi==19.2.0
 asgiref==3.2.3
+cffi==1.13.2
 Django==3.0.2
 django-rest-auth==0.9.5
 djangorestframework==3.11.0
 pkg-resources==0.0.0
+pycparser==2.19
 pytz==2019.3
 six==1.13.0
 sqlparse==0.3.0