Upgrade password hashing to Argon2

2020-01-07 08:04:18 +00:00
parent ab750aa8ba
commit 39931077cc
2 changed files with 11 additions and 0 deletions
--- a/apiserver/apiserver/settings.py
+++ b/apiserver/apiserver/settings.py
@@ -112,6 +112,14 @@ AUTH_PASSWORD_VALIDATORS = [
    },
 ]

+PASSWORD_HASHERS = [
+    'django.contrib.auth.hashers.Argon2PasswordHasher',
+    'django.contrib.auth.hashers.PBKDF2PasswordHasher',
+    'django.contrib.auth.hashers.PBKDF2SHA1PasswordHasher',
+    'django.contrib.auth.hashers.BCryptSHA256PasswordHasher',
+]
+
+

 # Internationalization
 # https://docs.djangoproject.com/en/3.0/topics/i18n/